Qlik Community

Qlik Sense Deployment & Management

Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.

Not applicable

Security rule based on Virtual proxy used

Can I set a security rule based on Virtual proxy the user used at login? We'd like to open logging to public internet, for example for mobile users etc. If we allow login from public internet it will come thru a specific virtual proxy. But we would like to give access to restricted content that way, so we'll put that to another stream. Rest of content (the more sensitive content) will be accessible by logging in thru another virtual proxy. Or is it so that once user gets in, he/she sees everything they see, no matter how they log in?

1 Solution

Accepted Solutions
ves
Valued Contributor

Re: Security rule based on Virtual proxy used

One solution is to enable the extended environment (from proxy configuration). This allow you to track the client IP address (expect the outer request come through a different network class). You should write a security rule using it (user.environment.ip) to restrict the access to certain content for those coming from outside


4 Replies
ves
Valued Contributor

Re: Security rule based on Virtual proxy used

One solution is to enable the extended environment (from proxy configuration). This allow you to track the client IP address (expect the outer request come through a different network class). You should write a security rule using it (user.environment.ip) to restrict the access to certain content for those coming from outside


Not applicable

Re: Security rule based on Virtual proxy used

Thanks Vincenzo! So to use the user.environment.ip in the security rule, I just need to assign some wildcard to evaluate if the traffic is from inside, right? I mean I won't know every single IP.

ves
Valued Contributor

Re: Security rule based on Virtual proxy used

Yes you should use wild character (*) and like instead the equal sign. 

Not applicable

Re: Security rule based on Virtual proxy used

Thanks ves