Does the Data Management Gateway need to be publicly accessible or can it be behind a firewall?

[jgraham]

Looking to setup a Data Management Gateway to access on-prem data with office 365.  Following this link i can't find out if it needs to be in my dmz or not. 

https://support.office.com/en-ca/article/Create-a-Data-Management-Gateway-2ddfe0c0-bdb3-42e9-b179-aa...

[jjblanco]

Hi.

I've just happened to be involved in a very similar issue where the gateway was not fully working, although the settings on the data sources mentioned it was online and all good, and locally all seemed fine as well.

Well, it turns out that the marketing blurb...

Non-intrusive to corporate firewall – Data Management Gateway just works after installation, without having to open up a firewall connection or requiring intrusive changes to your corporate network infrastructure. (from https://support.office.com/en-US/Article/An-Inside-look-at-Microsoft-Data-Management-Gateway-078d306... or the mentioned article around falling back to standard HTTP or HTTPS ports)

... is NOT 100% true, and you DO need to open some non-standard ports on your firewall, else some things may not work (don't want to go into all the possible variations of what those "some things" could be, as I am afraid there could be a number of them). Long story short, please review this support article around what really needs to be done to make sure the gateway works: http://blogs.technet.com/b/powerbisupport/archive/2014/12/19/failed-to-register-the-gateway-key.aspx...

Cheers!

[andre]

In short, no it does not have to be in DMZ, just needs to run on a host that can see the internet.

[Greg_Deckler]

From: http://www.sqlchick.com/entries/2014/6/8/power-bi-security-overview

"The DMG on the on-premises server communicates with cloud services with outgoing ports 9350-9354.  It falls back to 443/80 if the other ports are not open. No incoming ports are required from the internet because messages are received via Service Bus.

For OData feeds, however, it does require an open port of 8050 or 8051. 

More information on this is available from this Channel 9 session called Deep Dive on the Data Management Gateway in Power BI."