Required Addresses, Proxies, and Ports

Tableau uses common ports (80 and 443) to make internet requests. In most cases, the computer where Tableau Desktop or Tableau Prep Builder is installed and the network it is running on are already configured to allow the necessary access.

Internet address requirements

If Tableau doesn't have direct access to the internet, make sure that the domains listed in the following table are allowed by the proxy server on the computer where Tableau is installed and in the network firewall (if there is one).

Product/Component Internet access requirement
To publish workbooks and data sources to Tableau Cloud
  • *online.tableau.com
  • sso.online.tableau.com
Tableau Cloud
Browser access
  • *.tableau.com
  • *online.tableau.com
  • mapsconfig.tableau.com
  • api.mapbox.com
  • *.cloudfront.net (CDN for Amazon Web Service)
  • *akamai (CDN for some Tableau Cloud pods)
  • (Optional) *.nr-data.net and *.newrelic.com (App Monitoring for New Relic)
Maps Tableau 2019.2 and later:
  • mapsconfig.tableau.com
  • api.mapbox.com

Tableau 2019.1 and earlier:

  • maps.tableausoftware.com

Note: Beginning with Tableau 9.1, Tableau maps use an SSL connection on port 443.

App Monitoring for New Relic's web analytic platforms
  • *.nr-data.net
  • *.newrelic.com
Licensing Used when activating product keys and registering the product.
  • atr.licensing.tableau.com:443

  • licensing.tableau.com:443

  • register.tableau.com:443

  • o.ss2.us

  • s.ss2.us

  • crt.rootca1.amazontrust.com

  • crt.sca1b.amazontrust.com

  • crt.sca0a.amazontrust.com

  • crt.sca1a.amazontrust.com

  • crt.sca2a.amazontrust.com

  • crt.sca3a.amazontrust.com

  • crt.sca4a.amazontrust.com

  • *.digicert.com

  • ocsp.*.amazontrust.com

  • crl.*.amazontrust.com

Requests to the above domains may be on port 80 or 443. Port 80 is used for certificate validation (revocation, certificate chain, etc). Port 443 is used for SSL connections.

Requests to the ocsp.*.amazontrust.com and crl.*.amazontrust.com domains are managed by Amazon for certificate revocation information. See ACM certificate characteristics(Link opens in a new window) for more information.

Crash logs
  • report-issue.tableau.com
  • crash-artifacts 747369.s3.amazonaws.com

  • s3-us-west-2-w.amazonaws.com

  • s3-w-a.us-west-2.amazonaws.com

Activate and run Tableau Prep Builder To activate and run Tableau Prep Builder when a secure web proxy is configured:
  • Windows: In your Local Area Network (LAN) settings, select Bypass proxy server for local addresses.

  • MacOS: In the Proxies tab, add the IP address 127.0.0.1 to the excluded local hosts list. For more information, see Bypassing proxy settings(Link opens in a new window) in the MacOS User Guide.

Registration register.tableau.com:443

Required to register Tableau Prep Builder.

Discover Pane(optional)
  • https://www.tableau.com
  • www.google-analytics.com
  • js-agent.newrelic.com
  • img.en25.com
  • galleryapi.tableau.com

If there is no access to these websites, the Discover pane won't show correctly on the home page. If access is disconnected, the links on the pane will be broken.

Product update https://downloads.tableau.com

If you have selected "Enable Automatic Product Updates" in the HELP menu, then Tableau Desktop connects to downloads.tableau.com while starting up.

Salesforce MFA with Tableau authentication

*.salesforce.com

If multi-factor authentication (MFA) with Tableau authentication (Tableau with MFA) is enabled for your site and your environment is using proxies that prevent clients from accessing other necessary services. See Tableau Cloud IP addresses for data provider authorization.(Link opens in a new window)

Tableau Desktop Public Edition public.tableau.com: 443
Tableau Exchange

Required to display listings of Accelerators and dashboard extensions from the Tableau Exchange:

  • exchange.tableau.com
  • extensiongallery.tableau.com

Required to use the data mapper for Accelerators:

  • data-mapper.tableau.com
Tableau Bridge See Optional forward proxy filtering.
Tableau Dashboard Extensions

Required to use Sandboxed dashboard extensions:

extensions.tableauusercontent.com: 443

For more information, see Manage Dashboard Extensions in Tableau Server(Link opens in a new window).

Proxy environment support

Tableau Prep Builder can't connect to a server that has an authenticating reverse proxy that lies in front of the server; all authentication must be done through Tableau Server or Tableau Cloud. Also, Tableau Prep Builder doesn't support forward proxies that require authentication. Work with your IT team to allow access to Tableau Server or Tableau Cloud through the proxy without authentication. For information about configuring proxies for Tableau Server, see Configuring Proxies for Tableau Server.

Maps

If the maps domain or ports are blocked, you can use offline maps instead. For more information, see Select Background Maps(Link opens in a new window) in the Tableau Help.

Crash logs

When Tableau Desktop encounters unforeseen circumstances, it might exit unexpectedly. If a crash occurs, log files and dump files are produced to capture detailed information to help Tableau engineers debug the issue. The next time Tableau Desktop is opened, the user is given the option to automatically upload the log and dump files.

However, if you work in an organization that is subject to data privacy regulations, you might not want your users to be able to upload the log and dump files. In those situations you can disable the crash upload prompt from showing. For information about how to disable the crash upload prompt for your users, see Change Installation Settings after Installation.

Test internet access

To test whether firewall and proxy settings are configured correctly and whether a computer has the internet access that Tableau needs, try the following links on a computer where Tableau Desktop is installed:

If the configuration is working, these links will prompt you to download a json file. However, if you don't get a download prompt or if your test passes only because you manually entered user credentials, you will either need to change the network settings or you users will need to work offline.

Work offline (Tableau Desktop)

In some cases, if you or an IT administrator is not able to change the web proxy or firewall configuration settings to allow Tableau to access the sites it needs, your users can use Tableau offline. Using Tableau offline means that your must perform product activation using an offline process, and that your users use offline maps for the visualizations that require them.

Thanks for your feedback!Your feedback has been successfully submitted. Thank you!