Cognos Analytics

View Only

Cognos Analytics - IIS Application Request Routing extension question

Aaron Young posted 07/09/26 09:31 AM

Good morning,

We are using IBM Cognos Analytics as part of our Oracle Health Sciences InForm suite. Per the below DISA Security Technical Implementation Guide (STIG), a web server should be primarily a web server or a proxy server but not both. Is the Proxy being on required for Cognos Analytics to work correctly?

In order to risk accept the current setting, we need a response explaining why we need to have this setting.

Cognos Install instructions:

https://www.ibm.com/docs/en/cognos-analytics/12.1.x?topic=services-configuring-iis-in-cognos-analytics

DISA STIG:

https://www.stigviewer.com/stigs/microsoft_iis_100_server/2026-02-26/finding/V-218794

John Cusack posted 07/13/26 05:30 PM

Hi Aaron,

I feel this is a fairly complicated question to answer. The short answer is - you do not need the proxy enabled because you do not need a webserver.

You can access Cognos directly through the primary dispatcher (http:\\<servername>:<port#>/ibmcognos/bi/v1/disp) and this allows you to bypass the webserver completely. I think this approach opens up a different can of worms for you. I believe you can make it work but it will be fairly complicated to do so without the webserver portion enabled.

Hope this helps.

Cognos Analytics