1. QlikView Security Overview Marcus Spitzmiller

2. EXCELSQLSAPERP ORACLE SALESFORCE DATA WAREHOUSE INFORMATICA Finance Marketing Sales Operations Presentation QLIKVIEW WEBSERVER BUSINESS DISCOVERY APPS Application QLIKVIEW PUBLISHER BUSINESS USERS IT Admins Authoring OPERATIONAL DATA SOURCES Data Access QlikView Business Discovery Platform QLIKVIEW SERVER Data / Business Analysts Developers QLIKVIEW MANAGEMENT CONSOLE QLIKVIEW DEVELOPER Windows IIS

3. Security Overview QV Server QV Publisher Web Server Users Authentication Active Directory Single Sign On Integration Custom Integration Session created in QlikView Authorization Active Directory LDAP ODBC Authentication Authorization Lookup Apply

4. Section Access - Dynamic Reduction

5. Section Access – Row and Column Entitlements Associate with Data Model to drive data visibility Data Model Entitlements

6. Section Access – Row and Column Sourced from Management Console Sourced from Database Data Layer

7. Loop and Reduce - Physical Reduction

8. Loop and Reduce + Section Access RegionUserDepartment NorthJohnSales NorthGeorgeHR SouthMaryFinance WestJillSales RegionUserDepartment NorthJohnSales NorthGeorgeHR RegionUserDepartment SouthMaryFinance RegionUserDepartment WestJillSales Section Access Sales.qvw Sales_South.qvw Sales_North.qvw Sales_West.qvw Data Model Loop and Reduce

9. Audit Logging refers to the process of capturing user actions in QlikView Auditable Activities –Open Document –Navigate Sheet –Selections Captured Information –User –Timestamp –Application –Type of Action (application open, sheet open, selection, etc.) –Value No Response Time or Server Resource Impact Auditing

10. Ports QV Server QV Publisher Web Server Users AD: 389 Authorization Lookup Apply HTTP / HTTPS (80 / 443) Sessions: 4747 (Encrypted) Publish: 4747 (Encrypted) /SMB AD: 389 EDW ODBC

11. Data QlikView Applications (.qvw) Binary, compressed, difficult to read, not encrypted Customers requiring encryption can leverage Windows EFS QlikView Data (.qvd) Binary, difficult to read, not encrypted Customers requiring encryption can leverage Windows EFS QlikView Publisher QlikView Server Folder access controlled by Windows ACLs Publish

12. Authentication –Active Directory –Single Sign On Integration (HTTP Headers) –Custom Integration (GetWebTicket API) Application Authorization –Possible via Users / Groups –Active Directory –LDAP –ODBC Data Access –Physical and Dynamic Segmentation (i.e., Loop and Reduce / Section Access) –Secure to Row and Column –Can be secured in motion and at rest Summary

13. Thank You!