Tableau uses common ports (80 and 443) to make internet requests. In most cases, the computer where Tableau Desktop or Tableau Prep Builder is installed and the network it is running on are already configured to allow the necessary access.

Internet address requirements

If Tableau doesn't have direct access to the internet, make sure that the domains listed in the following table are allowed by the proxy server on the computer where Tableau is installed and in the network firewall (if there is one).

Product/Component Internet access requirement
To publish workbooks and data sources to Tableau Online
  • *online.tableau.com
  • sso.online.tableau.com
Maps Tableau 2019.2 and later:
  • mapsconfig.tableau.com
  • api.mapbox.com

Tableau 2019.1 and earlier:

  • maps.tableausoftware.com

Note: Beginning with Tableau 9.1, Tableau maps use an SSL connection on port 443.

Licensing Used when activating product keys and registering the product.
  • atr.licensing.tableau.com:443

  • licensing.tableau.com:443

  • register.tableau.com:443

  • s.ss2.us

  • ocsp.rootg2.amazontrust.com

  • ocsp.rootca1.amazontrust.com

  • ocsp.sca1b.amazontrust.com

  • crt.sca1b.amazontrust.com

  • crt.rootca1.amazontrust.com

  • ocsp.sca0a.amazontrust.com

  • crt.sca0a.amazontrust.com

  • ocsp.sca1a.amazontrust.com

  • crt.sca1a.amazontrust.com

  • ocsp.sca2a.amazontrust.com

  • crt.sca2a.amazontrust.com

  • ocsp.sca3a.amazontrust.com

  • crt.sca3a.amazontrust.com

  • ocsp.sca4a.amazontrust.com

  • crt.sca4a.amazontrust.com

  • crl.rootca1.amazontrust.com

  • crl.rootg2.amazontrust.com

  • crl.sca1b.amazontrust.com

Requests to the above domains may be on port 80 or 443. Port 80 is used for certificate validation (revocation, certificate chain, etc). Port 443 is used for SSL connections.

Crash logs report-issue.tableau.com
Activate and run Tableau Prep Builder To activate and run Tableau Prep Builder when a secure web proxy is configured:
  • Windows: In your Local Area Network (LAN) settings, select Bypass proxy server for local addresses.

  • MacOS: In the Proxies tab, add the IP address 127.0.0.1 to the excluded local hosts list. For more information, see Bypassing proxy settings(Link opens in a new window) in the MacOS User Guide.

Registration register.tableau.com:443

Required to register Tableau Prep Builder.

Discover Pane(optional)
  • https://www.tableau.com
  • www.google-analytics.com
  • js-agent.newrelic.com
  • img.en25.com

If there is no access to these websites, the Discover pane won't show correctly on the home page. If access is disconnected, the links on the pane will be broken.

Product update https://downloads.tableau.com

If you have selected "Enable Automatic Product Updates" in the HELP menu, then Tableau Desktop connects to downloads.tableau.com while starting up.

MFA with Tableau authentication

*.salesforce.com

If multi-factor authentication (MFA) with Tableau authentication (Tableau with MFA) is enabled for your site and your environment is using proxies that prevent clients from accessing other necessary services. See Tableau Online IP addresses for data provider authorization.(Link opens in a new window)

Tableau Desktop Public Edition public.tableau.com: 443

Proxy environment support

Tableau Prep Builder can't connect to a server that has an authenticating reverse proxy that lies in front of the server; all authentication must be done through Tableau Server or Tableau Online. Also, Tableau Prep Builder doesn't support forward proxies that require authentication. Work with your IT team to allow access to Tableau Server or Tableau Online through the proxy without authentication. For information about configuring proxies for Tableau Server, see Configuring Proxies for Tableau Server.

Maps

If the maps domain or ports are blocked, you can use offline maps instead. For more information, see Select Background Maps(Link opens in a new window) in the Tableau Help.

Crash logs

When Tableau Desktop encounters unforeseen circumstances, it might exit unexpectedly. If a crash occurs, log files and dump files are produced to capture detailed information to help Tableau engineers debug the issue. The next time Tableau Desktop is opened, the user is given the option to automatically upload the log and dump files.

However, if you work in an organization that is subject to data privacy regulations, you might not want your users to be able to upload the log and dump files. In those situations you can disable the crash upload prompt from showing. For information about how to disable the crash upload prompt for your users, see Change Installation Settings after Installation.

Test internet access

Use the following links to test whether firewall and proxy settings are configured correctly and whether a computer has the internet access that Tableau needs:

If the configuration is working, these links will prompt you to download a json file. However, if you don't get a download prompt or if your test passes only because you manually entered user credentials, you will either need to change the network settings or you users will need to work offline.

Work offline (Tableau Desktop)

In some cases, if you or an IT administrator is not able to change the web proxy or firewall configuration settings to allow Tableau to access the sites it needs, your users can use Tableau offline. Using Tableau offline means that your must perform product activation using an offline process, and that your users use offline maps for the visualizations that require them.

Thanks for your feedback!