PowerBI Service Data Gateway Security

[murrayfoxcroft]

I am looking in to PowerBI Service security and have a couple of questions. 

1) The docs state "The gateway does not require inbound ports" - how does it receive requests for data? For ODATA requests I assume this is over 443. From PowerBI service, this is possibly over Azaure Service Bus, so how does it work with no inbound ports?

2) For the data flowing to Azure Service Bus and then in to PowerBI service, how is this encrypted in transit? At the protocol levle? In the payload?

Thanks 

[v-shex-msft]

Hi @murrayfoxcroft,

>>1) The docs state "The gateway does not require inbound ports" - how does it receive requests for data? For ODATA requests I assume this is over 443. From PowerBI service, this is possibly over Azaure Service Bus, so how does it work with no inbound ports?

If you want to know more about azure datacenter service ip, I'd like to suggest you to check at below link:

Microsoft Azure Datacenter IP Ranges

>>2) For the data flowing to Azure Service Bus and then in to PowerBI service, how is this encrypted in transit? At the protocol levle? In the payload?

I'm not so sure for encrypted operation at the data transfer, maybe you can take a look at gateway whitepaper which Eno1978 mentioned.

Regards,

Xiaoxin Sheng

[Seth_C_Bauer]

@murrayfoxcroft By "docs" do you mean you are looking at the Power BI Security Whitepaper? or something else?

[murrayfoxcroft]

I was referring to this: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem/

I can understand no outbound for the service bus as the connection is initiated from the client (gateway). So I am just wondering about the ODATA now - it must need 443 at least and then the encryption used on the Service Bus.