Tableau Cloud Help

IP filtering is a security feature that controls access to your Tableau Cloud site. Use IP filtering to define approved IP addresses or ranges. Only users and services connecting from these addresses can access and interact with the site.

This topic describes how to add and manage IP filtering in Tableau Cloud.

What to expect when using IP filters

Here's what happens when users and services attempt to access a site with IP filtering configured.

What IP filtering affects

IP filtering provides security by checking incoming traffic against the list of approved IP addresses and ranges that you define for the site. Only routable public IP addresses can be used in this list. Private IP addresses and ranges, such as 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16, won't work and can cause lockouts. The restriction applies to all inbound traffic types attempting to access the site, including:

• Access through a web browser

• Tableau Desktop connections

• REST API calls

• Embedded views

Backend behavior and exceptions

IP filtering doesn't affect processes that run in the background, such as Tableau Bridge. For example, unapproved Bridge computers continue to work, but their status won't appear on the Bridge settings page.

Sign-in behavior

Signing in to Tableau Cloud works separately from IP filtering.

• Users can access www.online.tableau.com even if their IP address is blocked from a specific site.

• The site picker lists all sites a user belongs to, even if IP filtering restricts access to some of them.

• Access is denied only when a user or service attempts to connect to a filtered site from an unapproved IP address.

Configure IP filters on your site

To add an IP filter to your site, use these steps:

1. Sign in to the Tableau Cloud site as an admin and select Settings.

2. On the Security tab, scroll to IP Filtering.

3. Select the Enable IP Filtering checkbox. An inline message showing your device’s IP address appears.

   

4. In the New IP Addresses and IP Ranges section, define the IP addresses you want to filter using one of these options:

   • Individual address: Enter the IP address you want to filter. To filter more addresses, click Add.

   • Bulk editor: Expand the dropdown menu and select IP Address Bulk Editor. In the dialog, enter the IP addresses and ranges you want to filter. Only one IP address or range can be entered per line.

     

     Important: Before saving, verify that you've included your current public IP address. Don't add private addresses and ranges such as 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16. Using these addresses or excluding your current location can lock you out of your site.

5. Click Save.

The IP filter settings are saved, but it can take up to 15 minutes to apply changes to your site.

Update or remove IP filters

To make changes to IP filters on your site, use these steps:

1. Sign in to the Tableau Cloud site as an admin and select Settings.

2. On the Security tab, scroll to IP Filtering.

3. To update an IP address, use one of these options:

   • Individual address: Select the row you want to edit and make changes directly.

   • Bulk editor: Expand the dropdown menu and select IP Address Bulk Editor. In the dialog, make changes to your IP address list. Only one IP address or range can be entered per line.

4. To delete an IP address, select the delete icon next to the row you want to remove.

5. Click Save.

Turn off IP filtering on your site

Turning off IP filtering permanently deletes the list of IP addresses and ranges you defined. Any licensed user can then sign in to the site, regardless of their IP address. If you plan to use these settings later, copy your allow list before turning off IP filtering.

To turn off IP filtering, use these steps:

1. Sign in to the Tableau Cloud site as an admin and select Settings.

2. On the Security tab, scroll to IP Filtering.

3. (Optional) Copy your list of IP addresses and ranges.

4. Clear the Enable IP Filtering checkbox.

   

5. Click Save.

Troubleshooting

Regain site access after applying IP filters

If you lose access to your site after configuring IP filters, you can use these options to regain access.

• Ask another site admin: Contact another site admin who isn’t affected by the IP filter and have them update or remove the filter list.

• Try a different IP address: Access the site from another device or network that you know is allowed, such as your VPN. If you can sign in, update or remove the IP filter.

If you’re the only site admin and you lose all your access, contact Tableau Support for assistance. Tableau must manually reset or update the IP filters before you can sign in again.