Whitelist only IPs in Data Region or all Azure DCs

[newbee]

We are working with the networking team to setup the PowerBI enterprise getway. For firewall exception the documentation states to list the IPs for data region. But this does not work as the app.powerbi.com maps to IP in another data region.

Can someone clarify on this?

[v-haibl-msft]

@newbee

Do you mean the IP list which can be downloaded here? This list is updated weekly and It is recommended that you whitelist the IP addresses. Could you please explain more about “the app.powerbi.com maps to IP in another data region”?

Best Regards,

Herbert

[mmeyers]

when you say the ip addresses are updated weekly, you mean you have to whitelist a new set of ip addresses each week?

[newbee]

Hi,

Here are more details. This is from the gateway configuration guide: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem/

-------------

It is recommended that you whitelist the IP addresses, for your data region, in your firewall. You can download the Microsoft Azure Datacenter IP list.

--------------

As per this guide we configured firewall exception for Australia Southeast and Australia East. But it is not working as app.powerbi.com is mapped to Singapore.

------------------------------

C:\>nslookup app.powerbi.com
Server:  192-168-1-1.tpgi.com.au
Address:  192.168.1.1

Non-authoritative answer:
Name:    wabi-south-east-asia-wfe.cloudapp.net
Address:  168.63.174.8
Aliases:  app.powerbi.com
          997de1ee-c405-4364-8b90-eb6f601a6af2.trafficmanager.net
          wabi-south-east-asia-wfe.analysis.windows.net

------------------------------

Please confirm if the documentation is accurate.

[nev]

Did you get this resolved as i have the same problem coming up?

What was your solution?

Thanks

Nev

[nev]

Did you get this resolved as i have the same problem coming up?

What was your solution?

Thanks

Nev