On-premise Gateway - Data Encryption from Oracle

Hi XhevahirMehalla,

This concern arises because Power BI Gateway encryption works differently from Azure Data Factory or Self-hosted Integration Runtime. In ADF/Synapse, you explicitly control Oracle network encryption using TCPS (port 2484) and Oracle Wallets. With Power BI, the gateway itself does not terminate or manage database-level encryption; it relies on the data source connection configuration to ensure data is encrypted in transit.

From a technical perspective, to protect Oracle data accessed through the On-premises Data Gateway, you must enforce Oracle native network encryption (TCPS) end to end. This means configuring the Oracle client on the gateway VM to use TCPS with Oracle Wallet, ensuring Power BI connects via the encrypted Oracle protocol. Power BI Desktop → Power BI Service → Gateway traffic is already encrypted using Azure Service Bus over TLS, so the remaining responsibility is securing the Oracle-to-Gateway leg.

Key point:
Power BI Gateway traffic is always encrypted to the Power BI Service, but Oracle-to-Gateway encryption must be enforced at the Oracle client and listener level using TCPS (SSL/TLS).

Helpful sources:

Power BI Gateway security

https://learn.microsoft.com/power-bi/connect-data/service-gateway-onprem

https://learn.microsoft.com/power-bi/enterprise/service-admin-gateway

Oracle network encryption (TCPS / SSL)

https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-secure-sockets-layer-authentication.html

Power BI + Oracle connectivity

https://learn.microsoft.com/power-bi/connect-data/desktop-connect-oracle-database

Microsoft Learn (recommended):

https://learn.microsoft.com/training/modules/power-bi-security-model/

Savio Ferraz | Microsoft Ambassador Edurocks and MinecraftEdu | Microsoft Learning Consulting | Google Certified Trainer and GEG Community Manager Diadema

Did my answer help? Mark my post as a solution or like it if you found it useful.