TM1 Forum

Hi All

I was wondering if any of you could help me on the following:

We have TM1 9.0 SP3 U7 (x64) operating worldwide on a Citrix platform. We've just acquired a company and there are challenges in the networking currently. We have the acquired company's data now loaded in our TM1 cubes but I want them to now see it. We don't have TM1 Web fully rolled out, but I am thinking that this could be a good way of providing access whilst the networking side gets sorted with the IT guys.

Looking at the guides and some posts here and on other sites, it seems that some kind of SSL certificate can be used to allow certain users access without the need for a VPN ? I'm not sure on all of this myself and am begining to get familiar with this, but if there are some of you who have managed to do this in a similar environment, I'd love to hear from you, as I don't even know where to start !!!!!!

Many thanks
Ajay

Ajay wrote: Looking at the guides and some posts here and on other sites, it seems that some kind of SSL certificate can be used to allow certain users access without the need for a VPN ? I'm not sure on all of this myself and am begining to get familiar with this, but if there are some of you who have managed to do this in a similar environment, I'd love to hear from you, as I don't even know where to start !!!!!!

This may have changed, but I raised a similar question when we first acquired Web (at version 9.1). Specifically I asked whether there were any white papers or similar on security issues involved in deploying Web "in the wild" like that.

The answer that I got was that they (Applix at the time) hadn't really tested it that way.

That was enough to scare a sufficient number of horses, and we decided that VPN was the way to go.

(Aside from which, we ran into an IT policy which declared that there whould be only one point of contact with the wider internet. You may want to check whether yours has a similar policy.)

why don't you give them ctx access?
deploying tm1web to internet is no big deal, open port 443 import a ssl cert and thats it

but really not recommended.