Firewall setup - IP used by Power BI Service during data refresh to access the web API

[NicolasCh]

Hi,

I have published a datased to Power BI Service. One the data source is an web API, called without any data gateway ("connect directly" mode)

In order the setup the web API firewall, what is the IP adress used by Power BI Service during data refresh to access the web API ?

Thanks for your helpful hints.

Nicolas

[technolog]

@NicolasCh @towhereur Please share your experience if possible! How do you have everything set up now? Did everything work stably using ip-whitelist? Have you tried using domains?

[mihart · Accepted solution]

Hi @NicolasCh

Unfortunately, it could be different each time within each region. 

It works in azure, but if its sitting on your internal servers, it wold be all the IP addresses within that range.

These articles might help,

https://www.microsoft.com/en-us/download/details.aspx?id=41653

https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem/#ports

Depending on the firewall type, you might be able to add *ftdns...

[Anonymous]

In the reply which is marked as solution is the solution for the people who is having Power BI server on premise. Its not applicable for cloud power BI services.

There the question is:

1. I'm using Power BI cloud Services.
2. I have Azure SQL database (PaaS) in Azure VNET wherein I have allowed specific IP addresses. 

Here I want solution so that I can allow only my "Azure Power BI services" to connect with "Azure SQL database (PaaS) instance configured in VNET".

To Achieve the same I need to add IP address of my Azure Power BI service to VNET NSG rule. Is there any way to get IP address of Azure Power BI service?

[towhereur]

@Anonymous 

Today, I found the solution for that.

I have an Azure VM with SQL 2017 and using it as a source for PowerBI Direct Query.

PowerBI analysis service seems to need port open to SQL query directly.

I wanted to find URL and I found wabi-south-east-asia-redirect.analysis.windows.net.

but it doesn't seems to work at all.

So, I opened inbound 1433 from any in my NSG. It worked and searched some session query.

I've finally got 52.141.17.183 IP address which is listed in AzureCloud.koreacentral service tag.

So, I added inbound TCP 1433 from service tag AzureCloud.koreacentral and test on PowerBI site, it worked!

If you want to allow PowerBI report all over the world, you can set it as AzureCloud.