Allow List Guidance for the Qlik Downloads page

[Sonja_Bauernfeind]

Qlik product downloads are accessible through the Qlik Download page on Qlik Community, which embeds a Qlik Cloud app. However, while the Qlik Community presents the download experience, GitHub stores and serves the installer assets as the backend distribution platform.

As a result, download URLs do not use a qlik.com domain.

This article explains the download flow and practical allowlisting options, specifically for use cases requiring exceptions for download destinations in firewalls, proxies, or endpoint security tools.

Download Sequence

While the visible link is a GitHub URL, the file always downloads from a second, dynamically generated URL on a different host. This two-step redirect is standard GitHub behavior for release downloads, not something specific to Qlik, and you must account for it when you define allowlisting rules.

When you select a download link, the request follows a fixed sequence of steps before Qlik delivers the file:

1. The customer selects a Download Link on the Qlik Download page.
2. The link points to a human-friendly GitHub release download URL, in the form: https://github.com/qlik-download/<repo>/releases/download/<tag>/<filename>
3. The customer's browser sends a request to that GitHub URL.
4. GitHub returns an HTTP redirect, not the file, to a technical delivery URL hosted on release-assets.githubusercontent.com.
5. The redirect URL includes a repository identifier, an asset path, and a signed, time-limited query string that GitHub generates at request time. Because GitHub generates these values dynamically per request, and they expire after a short period, no one can know or predict the final redirect URL in advance.

   As a result, the Qlik Download page can't publish it as a static link, and can only link to the initial GitHub release URL. The redirect must happen at download time.

   The visible link is a GitHub URL, but the file always downloads from a second, dynamically generated URL on a different host. This two-step redirect is standard GitHub behavior for release downloads, not something specific to Qlik, and you must account for it when you define allowlisting rules.
6. Your browser follows the redirect automatically, and the installer file downloads from that final release-assets.githubusercontent.com URL.

Allowlisting Reference

The following table lists, per product, the stable GitHub download URL prefix and the corresponding redirect URL prefix on release-assets.githubusercontent.com. These prefixes are predictable, so you can safely use them as allowlisting rules. GitHub generates the remainder of each URL, the path segment and signed query string, dynamically per request, so you can't predict it.

Product	URL Prefix	Redirect URL Prefix
Qlik Alerting	github.com/qlik-download/qaw-winstaller/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432473224/
Qlik Analytics Migration Tool	github.com/qlik-download/Qlik-Analytics-Migration-Tool/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/1002931039/
Qlik Compose	github.com/qlik-download/compose/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436162609/
Qlik Connector for use with SAP NetWeaver(R)	github.com/qlik-download/sap-connectors/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436160296/
Qlik Data Catalog	github.com/qlik-download/catalog-main/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432470199/
Qlik Dynamic Engine CTL	github.com/qlik-download/CTL-Dynamic-Engine/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/966738174/
Qlik Enterprise Manager	github.com/qlik-download/enterprise-manager/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436160879/
Qlik GeoAnalytics Data Package	github.com/qlik-download/geo-analytics-data-package/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/434628780/
Qlik GeoAnalytics Extensions	github.com/qlik-download/geo-mapinstaller/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/434627232/
Qlik GeoAnalytics Server	github.com/qlik-download/geo-serverinstaller/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/434625979/
Qlik Gold Client for BW	github.com/qlik-download/gold-client-for-bw/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436163221/
Qlik Gold Client for Data Protection	github.com/qlik-download/gold-client-for-data-protection/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436164437/
Qlik Gold Client for ERP	github.com/qlik-download/gold-client-for-erp/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436163591/
Qlik Gold Client for SCM	github.com/qlik-download/gold-client-for-scm/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436164028/
Qlik Lineage Connector	github.com/qlik-download/lineage-connector/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/431906639/
Qlik NPrinting	github.com/qlik-download/nprinting/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432471836/
Qlik ODBC Connector	github.com/qlik-download/qvodbcconnector/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432475352/
Qlik PostgreSQL Installer	github.com/qlik-download/qlik-postgresql-installer/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/508670299/
Qlik Replicate	github.com/qlik-download/replicate/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/436162215/
Qlik REST Connector	github.com/qlik-download/qvrestconnector/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432475927/
Qlik Salesforce Connector	github.com/qlik-download/qvsalesforceconnector/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432476351/
Qlik Sense Content Monitor	github.com/qlik-download/Qlik-Sense-Monitoring-App/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/1090471852/
Qlik Sense Desktop	github.com/qlik-download/qlik-sense-desktop/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/423385969/
Qlik Sense Enterprise on Windows	github.com/qlik-download/qlik-sense-server/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/408742360/
Qlik Sense Mobile Client-Managed	github.com/qlik-download/qlik-sense-mobile-cm/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/1315919785/
Qlik Web Connectors (Standalone)	github.com/qlik-download/qwc-standalone/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/432476698/
QlikView	github.com/qlik-download/qlikview/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/467523108/
QlikView Bookmark Migration Tool	github.com/qlik-download/qv-migration-tool/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/435950651/
QlikView Governance Dashboard	github.com/qlik-download/qlikview-governance-dashboard/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/435951258/
QlikView to Qlik Sense Converter Tool	github.com/qlik-download/QlikView-to-QlikSense-Converter-Tool/releases/download/	release-assets.githubusercontent.com/github-production-release-asset/1191792310/