Hu.
Assuming you don't have any outside to inside filtering in place already, you can use the following commands on the PIX to permit the access you've mentioned:
pix#conf t
pix(config)#access-group outside in interface outside
pix(config)#access-list outside permit tcp any host x.x.x.x eq 6447
where outside is the name of the ACL (if you have an access group already applied to the outside - simply replace its name with outside above) and x.x.x.x is the ip address of the reporting server.
If the access is for internet users and the server is on a private IP address, you'll need to check and/or configure a static NAT entry for this server for them to connect to it. This is as follows:
pix#conf t
pix(config)#static (inside,outside) z.z.z.z x.x.x.x
where z.z.z.z is public address as you want it to appear to the internet and x.x.x.x is the server's real private address as it's seen on your internal network.
Hope this helps you.
