Maintaining Security with Oracle BI Discoverer 13-27
13.10.3 What is HTTPS and why should I use it?
The HTTPS protocol uses an industry standard protocol called Secure Sockets Layer SSL to establish secure connections between clients and servers.
The SSL protocol enables sensitive data to be transmitted over an insecure network, such as the Internet, by providing the following security features:
■
Authentication - a client can determine a servers identity and be certain that the server is not an impostor and optionally, a client can also authenticate the identity
of its server
■
Privacy - data passed between the client and server is encrypted such that if a third party intercepts messages, the third party cannot unscramble the data
■
Integrity - the recipient of encrypted data knows whether a third party has corrupted or modified that data
You can tell when SSL is enabled in Discoverer as follows:
■
The URL to start Discoverer Plus begins with https:, and a closed padlock appears at the left hand side of the applet’s status bar
Note : To deploy Discoverer Plus over HTTPS, you must select the Secure
Tunneling security protocol in Oracle Fusion Middleware Control Section 13.6.3.5,
How to set up Discoverer Plus to use the Secure Tunneling communication protocol
.
■
The URL to start Discoverer Viewer begins with https:, and a closed padlock or other equivalent symbol browser dependent appears in the browser’s status bar
13.10.4 How do I configure Discoverer to work in an intranet
You configure Discoverer to work in an intranet as follows:
■
Discoverer Viewer Deploying Discoverer Viewer in an intranet that is, inside a firewall requires no
additional configuration after an Oracle installation. Discoverer Viewer uses an HTTP connection.
■
Discoverer Plus Deploying Discoverer Plus in an intranet that is, inside a firewall requires no
additional configuration after an Oracle installation. Discoverer Plus uses a direct connection using JRMP.
Figure 13–5 A typical network configuration for Discoverer in an intranet
13.10.5 How do I configure Discoverer to work through a firewall?
You configure Discoverer to work through firewalls with HTTP or HTTPS, as follows:
■
Discoverer Viewer
13-28 Oracle Fusion Middleware Configuration Guide for Oracle Business Intelligence Discoverer
Discoverer Viewer requires no additional configuration if the firewall allows HTTP traffic to pass through.
■
Discoverer Plus Discoverer Plus requires no additional configuration if the firewall allows HTTP or
HTTPS traffic to pass through. To improve performance on initial connection, you might want to change the
Discoverer Plus communication protocol to one of the following:
■
For HTTP, set the communication protocol to Tunneling to prevent the Discoverer client from first trying to connect using JRMP, then by HTTP for
more information, see Section 13.6.3.4, How to set up Discoverer Plus to use
the Tunneling communication protocol .
■
For HTTPS, set the communication protocol to Secure Tunneling to prevent the Discoverer client from first trying to connect using JRMP, then by HTTP,
then by HTTPS for more information, see Section 13.6.3.5, How to set up
Discoverer Plus to use the Secure Tunneling communication protocol .
Figure 13–6 A typical firewall configuration for Discoverer using HTTP
13.10.6 Can I configure Discoverer to work through multiple firewalls?
Yes. If you are using HTTP or HTTPS, Discoverer works through multiple firewalls. For more information, see
Section 13.10.5, How do I configure Discoverer to work through a firewall?
13.10.7 How do I configure Discoverer to use encryption in an intranet?
You configure Discoverer to use encryption as follows:
■
Discoverer Viewer Configure mod_ossl to use HTTPS for more information, see Oracle Fusion
Middleware Administrators Guide for Oracle HTTP Server and deploy Discoverer Viewer on an HTTPS URL.
■
Discoverer Plus Configure mod_ossl to use HTTPS for more information, see Oracle Fusion
Middleware Administrators Guide for Oracle HTTP Server and deploy Discoverer Plus on an HTTPS URL. You must change the Discoverer Plus communication
protocol to Secure Tunneling for more information, see Section 13.6.3.5, How to
set up Discoverer Plus to use the Secure Tunneling communication protocol .
13.10.8 How do I configure Discoverer to use encryption through firewalls?
