Forum Discussion
Gateways for IP whitelisting
My goal is to avoid manually whitelisting Power BI Service IPs on my data source (the IPs need to be downloaded & changed weekly).
Does it make sense to use the Power BI gateway here? The gateway is installed on a windows server with a static IP (precludes the need to repeatedly whitelist different IPs).
What are the ramifications of this approach? Because most documents say that gateways are for accessing on-premise content.
Hi ShadowCircuit87,
This should be workable as long as the connection type can be made on the gateway.
The ramafications are mainly from a resource and securtiy persoective, you would need to have a server to install the gateway on adding operational costs and compelxity, and you would need to maintain the gateway and update it regularly.
From a security perspective, you would need to have firewall rules in place to allow your gateway to connect to your data source.
The intention of the on prem data gateway is to be a bridge between Fabric and your on prem network, but I see no evidence why it can't be a bridge between fabric and any other network.
You would also need to ensure that you have firewall rules applied to the gateway to allow connectivity to fabric. This can be done with wildcard domains if your IT team allows that, if not then you'd need to update the IPs from the weekly file so there would be no benefit.
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
2 Replies
Hi ShadowCircuit87,
This should be workable as long as the connection type can be made on the gateway.
The ramafications are mainly from a resource and securtiy persoective, you would need to have a server to install the gateway on adding operational costs and compelxity, and you would need to maintain the gateway and update it regularly.
From a security perspective, you would need to have firewall rules in place to allow your gateway to connect to your data source.
The intention of the on prem data gateway is to be a bridge between Fabric and your on prem network, but I see no evidence why it can't be a bridge between fabric and any other network.
You would also need to ensure that you have firewall rules applied to the gateway to allow connectivity to fabric. This can be done with wildcard domains if your IT team allows that, if not then you'd need to update the IPs from the weekly file so there would be no benefit.
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
Hi ShadowCircuit87,
We would like to confirm if our community members answer resolves your query or if you need further help. If you still have any questions or need more support, please feel free to let us know. We are happy to help you.
tayloramy ,Thanks for your prompt responseThank you for your patience and look forward to hearing from you.
Best Regards,
Prashanth Are
MS Fabric community support
