• Replies 5 replies
  • Subscribers 360 subscribers
  • Views 116 views
  • Users 0 members are here
Related

Accessing Web Reports and Dashboards from Internet

Mohiuddin (Mo) Faruqe
$organization
We are thinking of giving our users remote access to Web Reports and Dashboards from internet. Currently they access them through Tessitura client and internal URLs from within the Ballet Network. Our Network Team will create two external URLs to redirect them to the internal websites. Have any of you already done this and do you have any comment or suggestion on the following two issues?
 
 
1. Since we are not segregating reports for internal vs external access and users will be able to access all the SSRS reports and Dashboard Widgets available to their User Groups, some of which may pull lots of data and none is specially optimized for a slow connection, I am a little concerned about the overall performance. Last thing we want them to be discouraged because of a report or a dashboard takes a longtime to load on their handheld or other devices. I understand in some cases we have to rely on users' judgement.
 
 
2. Since all the incoming and outgoing requests will pass through our firewall and all the users will be authenticated by the Tessitura logins, I guess there is no major concern about security and we are not breaking any PCI rule here.
 
Thanks for any comment/suggestion and it will be great if you can share your experience. Thanks!
 
Best,
 
Mo
National Ballet of Canada
  • $organization

    Hi Mo,

    We are looking into this also, did you have any luck with enabling external access?

    Best,

    Nicholas

  • $organization

    Hi Nicholas, we will wait until Dashboards web app supports https, currently it doesn’t, before exposing it on the web for security reason. And we didn’t yet have a chance to try to give any external access to our Web Reports web app, which we were planning to test in January once our this season is over. For Web Reports we will try by setting it up in a DMZ and importing our internal domain root certificate as per Ron’s suggestion. Here is what Ron suggested:

     

    “I haven’t tried doing a redirect from an external URL to an internal one, so can’t speak to that directly.  For Web Reports so long as it ultimately hits a URL that supports https and has access to the database it should be ok.  When I have set it up I have put a separate instance of the web reports web application directly in the DMZ, imported the certificate of my domain root CA, made firewall adjustments for access and that worked.  I am guessing if you take a redirect approach you will at some point have an external https exposure of your internal service.  That is not necessarily bad but just be aware that since WebReports is currently an application under the larger service website address, that means all the other services will also be visible, not just web reports.  Just something to consider when looking at how you might do this.

     

    In terms of bandwidth, I honestly hadn’t really been too concerned mainly because I wouldn’t expect this to be all that heavily accessed, however if you do have some very large report output I suppose it could be felt.  I think some testing of reports that might be of concern would be good before you roll it out.  If you find a few that do cause issues you could warn your execs in advance and maybe come up with some more summarized version.”

     

    I will put an update if we can make it work.

     

    Best,

     

    Mo

     

    From: Tessitura Next Generation Forum [mailto:forums-nextgeneration@tessituranetwork.com] On Behalf Of Nicholas Hudson-Ellis
    Sent: Wednesday, December 26, 2012 11:51 PM
    To: Mohiuddin Faruqe
    Subject: Re: [Tessitura Next Generation Forum] Accessing Web Reports and Dashboards from Internet

     

    Hi Mo,

    We are looking into this also, did you have any luck with enabling external access?

    Best,

    Nicholas

    From: Mohiuddin Faruqe <bounce-mohiuddinfaruqe8297@tessituranetwork.com>
    Sent: 10/5/2012 10:45:51 AM

    We are thinking of giving our users remote access to Web Reports and Dashboards from internet. Currently they access them through Tessitura client and internal URLs from within the Ballet Network. Our Network Team will create two external URLs to redirect them to the internal websites. Have any of you already done this and do you have any comment or suggestion on the following two issues?

     

     

    1. Since we are not segregating reports for internal vs external access and users will be able to access all the SSRS reports and Dashboard Widgets available to their User Groups, some of which may pull lots of data and none is specially optimized for a slow connection, I am a little concerned about the overall performance. Last thing we want them to be discouraged because of a report or a dashboard takes a longtime to load on their handheld or other devices. I understand in some cases we have to rely on users' judgement.

     

     

    2. Since all the incoming and outgoing requests will pass through our firewall and all the users will be authenticated by the Tessitura logins, I guess there is no major concern about security and we are not breaking any PCI rule here.

     

    Thanks for any comment/suggestion and it will be great if you can share your experience. Thanks!

     

    Best,

     

    Mo

    National Ballet of Canada




    You were sent this message automatically by www.tessituranetwork.com because you subscribed to the Tessitura Next Generation forum email notifications. You may reply to this message or visit the site to reply to the post above. If replying via email, please consider deleting the previous message text before sending to help with readability on the site. Thank you!

  • $organization

    Mo and Nicholas,

    A "Web Reports and Tessitura Dashboards External Access Guide" has been posted in the Learning Resources - Documentation - Installation section of TN.com.

    Chris

  • $organization

    Thanks Chris. This is great. We were looking into the DMZ based solution. This document will help us to do it correctly.

     

    Mo

     

    From: Technology Roadmap Forum [mailto:forums-nextgeneration@tessituranetwork.com] On Behalf Of Chris Hipschen
    Sent: Thursday, March 21, 2013 11:22 AM
    To: Mohiuddin Faruqe
    Subject: Re: [Technology Roadmap Forum] Accessing Web Reports and Dashboards from Internet

     

    Mo and Nicholas,

    A "Web Reports and Tessitura Dashboards External Access Guide" has been posted in the Learning Resources - Documentation - Installation section of TN.com.

    Chris

    From: Mohiuddin Faruqe <bounce-mohiuddinfaruqe8297@tessituranetwork.com>
    Sent: 10/5/2012 10:45:51 AM

    We are thinking of giving our users remote access to Web Reports and Dashboards from internet. Currently they access them through Tessitura client and internal URLs from within the Ballet Network. Our Network Team will create two external URLs to redirect them to the internal websites. Have any of you already done this and do you have any comment or suggestion on the following two issues?

     

     

    1. Since we are not segregating reports for internal vs external access and users will be able to access all the SSRS reports and Dashboard Widgets available to their User Groups, some of which may pull lots of data and none is specially optimized for a slow connection, I am a little concerned about the overall performance. Last thing we want them to be discouraged because of a report or a dashboard takes a longtime to load on their handheld or other devices. I understand in some cases we have to rely on users' judgement.

     

     

    2. Since all the incoming and outgoing requests will pass through our firewall and all the users will be authenticated by the Tessitura logins, I guess there is no major concern about security and we are not breaking any PCI rule here.

     

    Thanks for any comment/suggestion and it will be great if you can share your experience. Thanks!

     

    Best,

     

    Mo

    National Ballet of Canada




    You were sent this message automatically by www.tessituranetwork.com because you subscribed to the Tessitura Next Generation forum email notifications. You may reply to this message or visit the site to reply to the post above. If replying via email, please consider deleting the previous message text before sending to help with readability on the site. Thank you!