DPR-ERR-2079 Firewall Security Rejection.

[danii64]

Hi All,

I have user who is getting the DPR-ERR-2079 Firewall Security Rejection. Your request was rejected by the security firewall. CAF Rejection details are available in the log. Please contact your administrator.

He is getting this error on a lot of the reports. There dont seem to be anyone else in the group who is experiencing the same error message.  It started with few of the reports but now he gets this error message every time he tries to run the report from "run with options"

We're on a multi tiered environment. CAF is enabled on both dispatchers, gateway URI is also the same on both dispatchers.

Any idea how he could be the only one getting this error?

Thank you in advance.

[MFGF]

I'd guess this user might be in a different domain which the CAF on each server doesn't recognise? Have you tried adding the user's domain into the "Valid domains or hosts" property of CAF on each server?

MF.

[Grim]

This is a know issue. I have the same problem here at work with my users due to the multi-server/state env (Dev, Test, Prod). You have a few options.

- Have the user start a new session form IE (If that's what your using) File>New Session.
- Have the user access the "second" server/env via the FQDN rather than just the server name (Or vice versa), or IP (Anything different)
- configure the cookie paths in Cognos configuration to be different/unique for each server

[danii64]

Thanks MFGF and Grim,


Grim: I have tried the first two options but to no with success.
can you elaborate a little on the third point you recommended though... im  kinda new to this and still learning would you mind explaining a little more. right now we have nothing defined in the domain or path.

MGF: it could have been the case but everything worked for him it was only recently that this started happening. Not to mention he is able to run reports from RS. Its only the 'Run with Options' that gives him the error.

Thank you again,
-Dnaii

[Grim]

If it's only one user and only with "run with options" then it's not the same situation I'm having.

Have you tried clearing the cache of the user running the issue?
Have the user also try the same report from a different machine.

[danii64]

Grim:

I had the user login from a different machine and the issue didnt appear on it. it seems like the problem is his machine.
I had the user clear the cache on his machine  or do you mean if i cleared cache on cognos admin? in this case i didn't.

[MFGF]

Is this user's machine definitely still in the same domain? It sounds a lot to me like it may not be...

MF.

[danii64]

for give me for sounding like a noob(thats b/c i am)

How do i verify that he is in the same domain?

[MFGF]

Hi,

Get your user to follow the instructions here and tell you the result:

http://windows.microsoft.com/en-gb/windows7/find-the-domain-your-computer-belongs-to

Cheers!

MF.

[danii64]

MFGF,


I verified that and he is connected to the correct domain.

Thanks!