Share via

  • Article

How to: Configure a Firewall for Report Server Access

Report server applications and published reports are accessed through URLs that specify an IP address, port, and virtual directory. If Windows Firewall is turned on, the port that the report server is configured to use is most likely closed. Indications that a port might be closed are the appearance of a blank Web page after requesting a report, or a blank page when you attempt to open Report Manager from a remote client computer.

To open a port, you must use the Windows Firewall utility on the report server computer. Reporting Services will not open ports for you; you must perform this step manually.

By default, the report server listens for HTTP requests on port 80. As such, the following instructions include steps that specify that port. If you configured the report server URLs to use a different port, you must specify that port number when following the instructions below.

If you are accessing SQL Server relational databases on external computers, or if the report server database is on an external SQL Server instance, you must open port 1433 and 1434 on the external computer. For more information, see How to: Configure a Windows Firewall for Database Engine Access in SQL Server Books Online. For more information about the default Windows firewall settings, and a description of the TCP ports that affect the Database Engine, Analysis Services, Reporting Services, and Integration Services, see Configuring the Windows Firewall to Allow SQL Server Access in SQL Server Books Online.

Prerequisites

These instructions assume that you already configured the service account, created the report server database, and configured URLs for the Report Server Web service and Report Manager. For more information, see Reporting Services Configuration How-to Topics.

You should also have verified that the report server is accessible over a local Web browser connection to the local report server instance. This step establishes that you have a working installation. You should verify that the installation is configured correctly before you begin opening ports. To complete this step on Windows Vista or Windows Server 2008, you must have also added the report server site to Trusted Sites. For more information, see How to: Configure a Report Server for Local Administration on Windows Vista and Windows Server 2008 (UAC).

Opening Ports in Windows Firewall

There are separate instructions for different versions of Windows Firewall.

To open port 80 on Windows 7 or Windows Server 2008 R2

  1. From the Start menu, click Control Panel, click System and Security, and then click Windows Firewall. Control Panel is not configured for 'Category' view, you only need to select Windows Firewall.

  2. Click Advanced Settings.

  3. Click Inbound Rules.

  4. Click New Rule in the Actions window**.**

  5. Click Rule Type of Port.

  6. Click Next.

  7. On the Protocol and Ports page click TCP.

  8. Select Specific Local Ports and type a value of 80.

  9. Click Next.

  10. On the Action page click Allow the connection.

  11. Click Next.

  12. On the Profile page click the appropriate options for your environment.

  13. Click Next.

  14. On the Name page enter a name of ReportServer (TCP on port 80)

  15. Click Finish.

  16. Restart the computer.

To open port 80 on Windows Vista or Windows Server 2008

  1. From the Start menu, click Control Panel, click Security, and then click Windows Firewall.

  2. Click Allow a program through Windows Firewall.

  3. Click Continue.

  4. On the Exceptions tab, click Add Port.

  5. In Name, type ReportServer (TCP on port 80).

  6. In Port number, type 80.

  7. Verify that TCP is selected.

  8. Click Change Scope.

  9. Click My network (subnet) only, and then click OK.

  10. Click OK to close the dialog box.

  11. Restart the computer.

To open port 80 on Windows Server 2003 SP 2 or Windows XP SP2

  1. From the Start menu, click Control Panel, and then click Windows Firewall.

  2. On the Exceptions tab, click Add Port.

  3. In Name, type ReportServer (TCP on port 80).

  4. In Port number, type 80.

  5. Verify that TCP is selected.

  6. Click Change Scope.

  7. Click My network (subnet) only, and then click OK.

  8. Click OK to close the dialog box.

  9. Restart the computer.

Next Steps

After you open the port and before you confirm whether remote users can access the report server on the port that you open, you must grant user access to the report server through role assignments on Home and at the site level. You can open a port correctly and still have report server connections fail if users do not have sufficient permissions. For more information, see How to: Grant User Access to a Report Server (Report Manager) in SQL Server Books Online.

You can also verify that the port is opened correctly by starting Report Manager on a different computer. For more information, see Report Manager in SQL Server Books Online.