What's the Power BI IP range when connecting to an outside Oracle database?

[nunopinto]

Good Morning,

I need to connect Power BI to an Oracle database which is protected by a firewall.

In order to do it I need to know the IP range that Power BI uses to connect the database to create an exception in the said firewall.

Can you tell me the IP range, please?

Thanks in advance.

Best Regards,

Nuno Resende Pinto

[Greg_Deckler]

I don't believe you can connect Power BI service directly to your Oracle database so you will have to go through Excel or Power BI Desktop and you will need the Power BI Personal Gateway. The computer you are building the Excel file or PBIX file on and the PC that you install gateway on should be the only IP's you need.

[nunopinto]

Thank you for your answer.

My cenario is: I've created a PBIX file and stored it in OneDrive for Business, in order to allow the data update at any time.

In this case the IP address I need is from OneDrive for Business? Where can I find it?

[andre]

Your desktop file on OneDrive will not update unless you open it up on your PC and refresh the model.  When manually refresh it that way and save it, the service will detect that the file has been updated and it will automatically update your dashboards and reports.  No firewall rules to worry about.

If you would like to automatically update your model, then you have to configure the personal gateway and make sure that it is running at the time of scheduled refresh.  In this scenario, the service will connect to the personal gateway over port 80 (it is typically already open by firewalls), your gateway then will connect to the oracle database and run your queries, but presumably since it is running on premise anyway, it should be able to hit your oracle database without having any firewall issues.  So the gateway will query your database and will then send the data back to the Power BI Service so that your model can get updated.

[nunopinto]

I've tried both with the PBIX file in OneDrive for Business and in my local machine and get the error 400. The gateway is running without any errors. I've got other data sets being updated through this gateway.

Do I have to install a gateway in the database machine? Is there an unix version of it?

How can I make this work?

[andre]

There is no Unix version of the gateway.  As long as the machine that the gateway is running on can access the database, the gateway should be able to provide the necessary connectivity.. I am not sure what error 400 means, can you post the error description and also where you are getting this error?

[nunopinto]

The error appear when I try to configure the update credentials. It seems that it can't reach the database.

This is the error (it's in portuguese but I'll try to tranlate):

Falha no início de sessão. (Flaw in bigining session)

ID de Atividade: (Activity ID)	b842ec72-d2b7-4778-b7d0-ea65916eba35
ID do Pedido: (Request ID)	15c2aaff-2e57-72a3-7e9f-aef15a4939f4
Código de Estado: (Status Code)	400
Hora: (Hour)	Tue Aug 11 2015 16:24:59 GMT+0100 (GMT Daylight Time)
Versão: (Version)	11.0.9167.572

The gateway installed in my machine is identified correctly but it can't access the database. But I can access the database with no constraints.

Do you have any idea how can I solve this?

Thanks again.

[andre]

I am wondering if you are hitting some internal firewall rule that prevents access to the database from the gateway (maybe there is something in those network packets coming from the gateway that the firewall between your machine and the database does not like).  I think you may want to have your network admins take a look at it.  From Power BI perspective, you have all the pieces in place to make it work.

[nunopinto]

From what I know the DB firewall only allows certaint IP addresses pass through. From what you've understand of my case which IP address/range do I have to add to the firewall exception list?

[andre]

I am not sure, your network people can trace the packets and see what is happening.  I would assume that it should be the Gateway that's making the connection to the database, but it is possible that originating IP address can be different, so unless MS chimes in the best bet is to have your network people sniff the traffic and see what it looks like.