Steps to access qliksense hub publicly.

[lalitkgehlot89]

Hi,

I want to access my qliksense hub publicly.

Please let me know what changes i have to do at server level or provide me any document for step by step configuration for the same.

Thanks a lot.

Lalit kumar

[mdmukramali]

Hi,

What do you mean by Publicly?

you want to access the Hub over the internet by AD Users or Anonymous Users?

Thanks,

Mukram

[lalitkgehlot89]

Hi Mukram,

I want to access the Hub over the internet by AD Users.

[mdmukramali]

Hi,

Then you have to assign Public IP to the QlikSense Server and add that IP to Whitelist.

you can ask network department to assign it.

if they assign any DNS Name then you have to include that DNS name also in the Whitelist.

Thanks,

Mukram.

[lalitkgehlot89]

Hi Mukram,

One more thing I want to clear. at the time of login hub redirect to https://localhost:4244/xxxxxxxxx  link for authentication. that shows port 4244 is open. for security concern can I hide this port.

If yes Please let me the process to hide this port.

[mdmukramali]

Hi,

if you are using the only HTTP then Ports 80 and 4248 should be open.

but if you are using HTTPS also then 443 and 4244 should be open,

see the below image.

for more information about ports follows the below help link.

Ports ‒ Qlik Sense

[lalitkgehlot89]

Thanks Mukram,

But my concern not about the port. Ports are opened and working properly.

at the time of login it https://localhost/hub redirect on https://localhost:4244/xxxxxxxxx    for user id and password authentication.

Here I want after redirecting or at the time redirecting port should not show in url.

is there any option to hide this port from url.

[Anonymous]

Curious as to why you do not wish to show it is using port 4244.

Hiding it would not help for security as any self respecting hacker would recognize it is doing windows authentication whose default port is 4244.

[rajagenentech]

@ Lalitkgehlot89 

 For your question, if you need to hide the port number, you need to have a friendly url created and create a CSR (Server Certificate) and get your Server Load balancing team to map it to a  Load Balancing pool. Ask your users to login via that friendly name where it will show the name without a port number. However, any hacker can use a simple option of using f12 debugger mode and get the details of the masking.