Required Addresses, Proxies and Ports

Tableau uses common ports (80 and 443) to make internet requests. In most cases, the computer where Tableau Desktop or Tableau Prep Builder is installed and the network it is running on are already configured to allow the necessary access.

Internet address requirements

If Tableau doesn't have direct access to the internet, make sure that the domains listed in the following table are allowed by the proxy server on the computer where Tableau is installed and in the network firewall (if there is one).

Product/ComponentInternet access requirement
To publish workbooks and data sources to Tableau Cloud
  • *online.tableau.com
  • sso.online.tableau.com
Tableau Cloud
Browser access
  • *.tableau.com
  • *online.tableau.com
  • mapsconfig.tableau.com
  • api.mapbox.com
  • *.cloudfront.net (CDN for Amazon Web Service)
  • *.akamai (CDN for some Tableau Cloud pods)
    Important: From August to December 2024, Tableau Cloud will be migrating to Salesforce's Hyperforce(Link opens in a new window) by pod. After your pod migrates to Hyperforce, *.akamai CDN will not be supported. For more information, see the Tableau Cloud Migration to Hyperforce(Link opens in a new window) knowledge article.
  • (Optional) *.nr-data.net and *.newrelic.com (App Monitoring for New Relic)
MapsTableau 2019.2 and later:
  • mapsconfig.tableau.com
  • api.mapbox.com

Tableau 2019.1 and earlier:

  • maps.tableausoftware.com

Note: Beginning with Tableau 9.1, Tableau maps use an SSL connection on port 443.

App Monitoring for New Relic's web analytic platforms
  • *.nr-data.net
  • *.newrelic.com
Licensing and certificate validationUsed when activating product keys, registering the product and signing in to Tableau Cloud.
  • atr.licensing.tableau.com:443

  • licensing.tableau.com:443

  • register.tableau.com:443

  • o.ss2.us

  • s.ss2.us

  • crt.rootca1.amazontrust.com

  • crt.sca1b.amazontrust.com

  • crt.sca0a.amazontrust.com

  • crt.sca1a.amazontrust.com

  • crt.sca2a.amazontrust.com

  • crt.sca3a.amazontrust.com

  • crt.sca4a.amazontrust.com

  • *.digicert.com

  • ocsp.*.amazontrust.com

  • crl.*.amazontrust.com

  • crt.rootg2.amazontrust.com

Requests to the above domains may be on port 80 or 443. Port 80 is used for certificate validation (revocation, certificate chain, etc). Port 443 is used for SSL connections.

Requests to the ocsp.*.amazontrust.com and crl.*.amazontrust.com domains are managed by Amazon for certificate revocation information. See ACM certificate characteristics(Link opens in a new window) for more information. We recommend that you install the Amazon root certificates in the certificate trust store on the computer running Tableau. To download and install the Amazon root certificates, see Certificate Authorities(Link opens in a new window) on the Amazon Trust Services website.

Crash logs
  • report-issue.tableau.com
  • crash-artifacts-747369.s3.amazonaws.com

  • s3-us-west-2-w.amazonaws.com

  • s3-w-a.us-west-2.amazonaws.com

Activate and run Tableau Prep BuilderTo activate and run Tableau Prep Builder when a secure web proxy is configured:
  • Windows: In your Local Area Network (LAN) settings, select Bypass proxy server for local addresses.

  • MacOS: In the Proxies tab, add the IP address 127.0.0.1 to the excluded local hosts list. For more information, see Bypassing proxy settings(Link opens in a new window) in the MacOS User Guide.

Registration

Required to register Tableau Prep Builder.

  • register.tableau.com:443
  • tableau.com:443
Discover Pane(optional)
  • https://www.tableau.com
  • www.google-analytics.com
  • js-agent.newrelic.com
  • img.en25.com
  • galleryapi.tableau.com

If there is no access to these websites, the Discover pane won't show correctly on the home page. If access is disconnected, the links on the pane will be broken.

Product updatehttps://downloads.tableau.com

If you have selected "Enable Automatic Product Updates" in the HELP menu, then Tableau Desktop connects to downloads.tableau.com while starting up.

Salesforce MFA with Tableau authentication
  • *.salesforce.com
  • id.tableau.com
  • identity.idp.tableau.com

If multi-factor authentication (MFA) with Tableau authentication (Tableau with MFA) is enabled for your site and your environment is using proxies that prevent clients from accessing other necessary services. See Tableau Cloud IP addresses for data provider authorisation.(Link opens in a new window)

Tableau Desktop Public Editionpublic.tableau.com: 443
Tableau Exchange

Required to display listings of Accelerators and dashboard extensions from the Tableau Exchange:

  • exchange.tableau.com
  • extensiongallery.tableau.com

Required to use the data mapper for Accelerators:

  • data-mapper.tableau.com
Tableau BridgeSee Optional forward proxy filtering.
Tableau Dashboard Extensions

Required to use Sandboxed dashboard extensions:

extensions.tableauusercontent.com: 443

For more information, see Manage Dashboard Extensions in Tableau Server(Link opens in a new window).

Proxy environment support

Tableau Prep Builder can't connect to a server that has an authenticating reverse proxy that lies in front of the server; all authentication must be done through Tableau Server or Tableau Cloud. Also, Tableau Prep Builder doesn't support forward proxies that require authentication. Work with your IT team to allow access to Tableau Server or Tableau Cloud through the proxy without authentication. For information about configuring proxies for Tableau Server, see Configuring Proxies for Tableau Server.

Maps

If the maps domain or ports are blocked, you can use offline maps instead. For more information, see Select Background Maps(Link opens in a new window) in the Tableau Help.

Crash logs

When Tableau Desktop encounters unforeseen circumstances, it might exit unexpectedly. If a crash occurs, log files and dump files are produced to capture detailed information to help Tableau engineers debug the issue. The next time Tableau Desktop is opened, the user is given the option to automatically upload the log and dump files.

However, if you work in an organisation that is subject to data privacy regulations, you might not want your users to be able to upload the log and dump files. In those situations you can disable the crash upload prompt from showing. For information about how to disable the crash upload prompt for your users, see Change Installation Settings after Installation.

Test internet access

To test whether firewall and proxy settings are configured correctly and whether a computer has the internet access that Tableau needs, try the following links on a computer where Tableau Desktop is installed:

If the configuration is working, these links will prompt you to download a json file. However, if you don't get a download prompt or if your test passes only because you manually entered user credentials, you will either need to change the network settings or you users will need to work offline.

Work offline (Tableau Desktop)

In some cases, if you or an IT administrator is not able to change the web proxy or firewall configuration settings to allow Tableau to access the sites it needs, your users can use Tableau offline. Using Tableau offline means that your must perform product activation using an offline process, and that your users use offline maps for the visualisations that require them.

Thanks for your feedback!Your feedback has been successfully submitted. Thank you!