ArcGIS Explorer Online - Cannot access ArcGIS Server located on internal network

[DennisGeasan]

I'm unable to open ArcGIS Server map services with ArcGIS Explorer Online.  I have set up a clientaccesspolicy.xml file and am able to access map services using an internal Silverlight application with no problem.  In the 'My Content' section of ArcGIS Online I am able to view the internal map services when using the ArcGIS.com map viewer application.

This has to be a problem with permissions for ArcGIS Explorer Online to access the internal map services.  I have tried several variations in the policy file but nothing is working.

Is it possible there is a firewall issue?

Can anyone see an error in the policy file.

This is the current one.

<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
  <policy>
   <allow-from http-request-headers="*">
    <domain uri="*"/>
    <domain uri="http://*"/>
   </allow-from>
   <grant-to>
    <resource path="/" include-subpaths="true" />
   </grant-to>
  </policy>
</cross-domain-access>
</access-policy>

Others I have tried:

<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
  <policy>
   <allow-from http-request-headers="*">
    <domain uri="http://*"/>
   </allow-from>
   <grant-to>
   <resource path="/" include-subpaths="true"  />
   </grant-to>
  </policy>
  <policy>
   <allow-from http-request-headers="*">
    <domain uri="https://arcgis.com"/>
   </allow-from>
   <grant-to>
   <resource path="/" include-subpaths="true"  />
   </grant-to>
  </policy>
</cross-domain-access>
</access-policy>

<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
  <policy>
   <allow-from http-request-headers="*">
    <domain uri="http://*"/>
    <domain uri="https://*"/>
   </allow-from>
   <grant-to>
   <resource path="/" include-subpaths="true"  />
   </grant-to>
  </policy>
</cross-domain-access>
</access-policy>

Any help much appreciated.

Dennis Geasan

[BrianHaren]

Dennis,

We had the same issue in my organization.  Configuring the client access policy never solved it.  However, we finally figured out that if we called the service using the server IP address instead of the server name that solved the issue.

Brian

[MikeMinami]

Here's a knowledge base article that may help...

http://support.esri.com/en/knowledgebase/techarticles/detail/39203

Thanks,

Mike

[DennisGeasan]

I have done what is suggested in the link you provided.  No joy.  If I use the IP address instead of the fully qualified name then I can access an internal ArcGIS Server.  But only if I am not logged into ArcGIS Online.  Once I log in to ArcGIS Online then I cannot access an internal ArcGIS Server by either the full name or IP address.  Not sure if this is an issue with ArcGIS Online or subtle security issue in Silveright.

[JasonCleaver]

I have done what is suggested in the link you provided. No joy. If I use the IP address instead of the fully qualified name then I can access an internal ArcGIS Server. But only if I am not logged into ArcGIS Online. Once I log in to ArcGIS Online then I cannot access an internal ArcGIS Server by either the full name or IP address. Not sure if this is an issue with ArcGIS Online or subtle security issue in Silveright.

I agree.. I tried both soutions and nothing.