What is the difference between using a reverse proxy and Extranet Server ?

[#1]

Hello everyone,

We want to give access to some external users. What are the advantages of Qlikview Extranet Server vs using a reverse proxy with publisher (and use custom AD) ?

Thank you

[Miguel_Angel_Baeyens]

Hi Laura,

QlikView Extranet Server allows you to use the AccessPoint and therefore a centralized security in your QMC to all visitors of your site. However, Publisher itself just reduces apps and stores them into folders. Provided those users have access to those folders (and that management goes away from the QMC) how they are supposed to open their apps? Using QlikView Desktop? If yes, how are you going to provide it to them? And most important, how will you lease licenses?

In short, if you want external users to access your QlikView apps, use an Extranet Server license.

Miguel

[#3]

Well, actually, in one of the subsidiaries of the company, they only use a reverse proxy.  Then, the access point becomes accessible from the internet and they connect through a custom account that is created in the custom AD.  And then we "distribute" the user document to this custom account so they can see the user document in Access point.  We have several named cal that can be dynamically allocated so they can take one

What do you think about that ? Does it look "secured" ?

[Miguel_Angel_Baeyens]

From a technical standpoint, there is nothing wrong. If it works, it works.

But as stated in the License Agreement, external users -those not belonging to the company who purchased the software- shouldn't be using other than the Extranet Server, or if you aim an even broader audience, the IAS.

Miguel

[Anonymous]

I set up an additional QlikView Web Server running under IIS in the DMZ.  Using IIS allows for additional security.

Also with the additional Web Server in the DMZ only the https port to the Web Server IP needs opening to the outside world and only the IP & ports needed to access the QlikView Server are opened to the LAN.

All the users accessing via the internet are company [who purchased the software] employees.