I've asked this in the UAG forum and haven't heard any responses yet, so I thought I would pose it to the rockstars in the SharePoint community and see what I get.
I'm experiencing a very strange issue that worked at one point, and then stopped working and I've exhausted all ideas that I can come up with on my own.
I have a SharePoint intranet published via UAG and everything works perfectly, except for SSRS reports embedded in a Performance Point dashboard. Originally, we had an issue with this because the developer published the dashboard using the internal report server url and once we determined that we needed to use the /_vti_bin/ReportServer? url to call the SSRS report, the dashboard started working externally, until very recently.
Now when we try to render the dashboard via UAG, we get a HTTP 500 error, but only on the SSRS reports. If I try to render a report directly in the browser through the url http(s)://site.fqdn.tld/_vti_bin/ReportServer?http(s)://site.fqdn.tld/path/to/report, I get the 500 error even though I can render the report using that URL internally using both HTTP and SSL.
When I call the report URL from the internet, I can even see a Kerberos login in the security log of the SharePoint server hosting the SSRS Report Server coming from UAG!
I can't find any reference to the report attemping to run in the SSRS logs, and checking both UAG and TMG logs yields no errors. The only entry that I can find in the ULS log corresponding to the event is this through UAG:
Unexpected error in ProcessRequest: System.Net.CookieException: The 'Value'='2011,9,17,19,22,32,0' part of the cookie is invalid. at System.Net.Cookie.VerifySetDefaults(CookieVariant variant, Uri uri, Boolean isLocalDomain, String localDomain, Boolean set_default, Boolean isThrow) at System.Net.CookieContainer.Add(Cookie cookie) at Microsoft.ReportingServices.SharePoint.Soap.Utils.SetRelayRequestCookies(HttpWebRequest relayRequest, HttpRequest clientRequest) at Microsoft.ReportingServices.SharePoint.Soap.RSBaseHttpHandler.ProcessRequest(HttpContext context)
I punched a hole through the firewall to attempt to access this directly bypassing any filtering UAG might be doing and I see this in the ULS log:
A WebException occured System.Net.WebException: The remote name could not be resolved: '<internal report server name>'
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at Microsoft.ReportingServices.SharePoint.Soap.RSBaseHttpHandler.AsyncGetResponse(HttpWebRequest request, HttpContext context)
at Microsoft.ReportingServices.SharePoint.Soap.ReportServerHttpHandler.GetRelayResponse(HttpWebRequest relayRequest, HttpRequest clientRequest, HttpContext context)
at Microsoft.ReportingServices.SharePoint.Soap.RSBaseHttpHandler.ProcessRequest(HttpContext context)
If, I browse directly to the library from the internet, I can run the report using the RDL with no problem and it comes up in the integrated viewer. Some reports use trusted accounts and some use Integrated Auth (Kerberos), but it doesn't seem to matter as none of them render externally.
The farm is a small two-server farm, but I'm having all web requests go to the server that is also running the report server front end until I fix the issue.
I'm completely stumped!
Any help is greatly appreciated