cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
lloetters
Advisor

Firewall Power BI Enterprise Gateway

Hi,

 

We have a customer, who liked to use the Power BI Enterprsie Gateway. The customer has an firewall installed that blocks all incoming traffic. We found a list with ports https://powerbi.microsoft.com/de-de/documentation/powerbi-gateway-enterprise/#ports here. The problem is the Firewall and Proxy can only pass Ip Adress no DNS adresses like

*.powerbi.com443HTTPS

 

Does anybody knows the full IP-Adresses for alle these Microsoft Services ? For your Customer it is very urgent. Thanks a lot.

 

*.powerbi.com443HTTPS
*.analysis.windows.net443HTTPS
*.login.windows.net443HTTPS
*.servicebus.windows.net5671-5672Advanced Message Queuing Protocol (AMQP)
*.servicebus.windows.net443, 9350-9354Listeners on Service Bus Relay over TCP (requires 443 for Access Control token acquisition)
*.frontend.clouddatahub.net443HTTPS
**.core.windows.net443HTTPS
login.microsoftonline.com443HTTPS
login.windows.net443HTTPS

 

 

Kind regards

Lukas

1 ACCEPTED SOLUTION

Accepted Solutions
Moderator GuyInACube
Moderator

Re: Firewall Power BI Enterprise Gateway

Here is the list of Azure Data Center IP's. Those ports are for Azure Service Bus and not Power BI specifically. We don't list IP ranges for specific services as the IPs can change based on service needs. This should get you what you need.

 

Microsoft Azure Datacenter IP Ranges
https://www.microsoft.com/en-us/download/details.aspx?id=41653

 

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube
10 REPLIES 10
Moderator GuyInACube
Moderator

Re: Firewall Power BI Enterprise Gateway

These are outbound connections. Not inbound. Is outbound traffic on those items being blocked?

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube
Nitron Frequent Visitor
Frequent Visitor

Re: Firewall Power BI Enterprise Gateway

Yes, outgoing communication to non standard-ports is being blocked

(standard 443) should be working

(non standard 5671-5672 and 9350-9354) is not working and agreed from firewall team that these ports a being blocked and target IPs are needed

Moderator GuyInACube
Moderator

Re: Firewall Power BI Enterprise Gateway

Here is the list of Azure Data Center IP's. Those ports are for Azure Service Bus and not Power BI specifically. We don't list IP ranges for specific services as the IPs can change based on service needs. This should get you what you need.

 

Microsoft Azure Datacenter IP Ranges
https://www.microsoft.com/en-us/download/details.aspx?id=41653

 

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube
lloetters
Advisor

Re: Firewall Power BI Enterprise Gateway

Hi thanks for you reply.

 

I can't download the file with the IP ranges. The file seems not be in place. Can you please send me a copy, if you have on?

 

Kind regards

 

Lukas

Nitron Frequent Visitor
Frequent Visitor

Re: Firewall Power BI Enterprise Gateway

Thank you for this hint.

 

I checked the download. It is currently not available :-(

Moderator GuyInACube
Moderator

Re: Firewall Power BI Enterprise Gateway

I just tried it and it worked. It is just an xml file. This could change in the furture! for the benefit of other folks maybe seeing this in the future. Please try to download it from the above link first - as that will have the latest version!

 

I tried to attach the file, but it isn't letting me. Even if i rename it to .txt. Smiley Sad  Can you try the download page again?

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube
Nitron Frequent Visitor
Frequent Visitor

Re: Firewall Power BI Enterprise Gateway

It's working again. The File includes a date and this was changed in the last days.

Now I got the list..

 

Thank you!

frankcanada Occasional Visitor
Occasional Visitor

Re: Firewall Power BI Enterprise Gateway

Hi there,

 

I know it was tagged as solved but in my case it didn't solve the problem.

 

So, we are facing the same problem a year later and the proposed solution is not quite practical for us. That files sums up about 3000 IP addresses.

 

In normal cases it's fine (nowadays firewalls are pretty good) but in our case we are in AWS environment and we use Security Groups (SG) and the maximum number of rules is 50.

 

The other alternative was to use the domain list provided in Power BI website but in that list there are wild cards for subdomains. That makes the situation harder because we would need a software (proxy) that can treat all requests and see if it's ok or not (that by itself can bring other security concerns)

 

Anyhow, I don't know if one year later a more elegant solution has been devised and if so please let us know.

 

Frank

elserafi Frequent Visitor
Frequent Visitor

Re: Firewall Power BI Enterprise Gateway

Dea