---
schema_version: "1"
id: bc45976a8c89adbc87199c454339ea0c0871d4a2bca213bcbc10c99bc44f1a04
title: Network communication
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/blueprint/bp_network_communication.md
canonical_url: https://help.tableau.com/current/blueprint/en-gb/bp_network_communication.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 87a6145d1978c9f5f31e2741cb3a97cc67f8f818b21348abfd8db0dc90a6cd4c
description: Blueprint guidance on Tableau Server network interfaces and configuring SSL to secure communication.
---
[Skip to main content](#main-content)

# Network communication

> [!TIP]
> 
> This content is part of Tableau Blueprint – a maturity framework allowing you to zoom in and improve how your organisation uses data to drive impact. To begin your journey, take our [assessment](https://www.tableau.com/en-gb/learn/webinars/tableaus-blueprint-self-assessment).

## Tableau Server

There are three main network interfaces in Tableau Server:

- Client to Tableau Server: The client can be a web browser, Tableau Mobile, Tableau Desktop, Tableau Prep Builder or the tsm ([Windows](https://help.tableau.com/current/server/en-gb/tsm.htm) | [Linux](https://help.tableau.com/current/server-linux/en-gb/tsm.htm)) and tabcmd ([Windows](https://help.tableau.com/current/server/en-gb/tabcmd.htm) | [Linux](https://help.tableau.com/current/server-linux/en-gb/tabcmd.htm)) utilities.
- Tableau Server to your database(s): To refresh data extracts or handle live database connections, Tableau Server needs to communicate with your database(s).
- Server component communication: This applies to distributed deployments only.

You should configure SSL to ensure that access to Tableau Server is secure and that sensitive information passed between the server and Tableau clients is protected on your network. For more information, visit Network security ([Windows](https://help.tableau.com/current/server/en-gb/security_net.htm) | [Linux](https://help.tableau.com/current/server-linux/en-gb/security_net.htm)) and Ports ([Windows](https://help.tableau.com/current/server/en-gb/ports.htm) | [Linux](https://help.tableau.com/current/server-linux/en-gb/ports.htm). To review SSL configuration examples for industry standard reference architecture, visit Part 6 of the Tableau Server enterprise deployment guide, [Part 6 - Post-installation configuration](https://help.tableau.com/current/guides/enterprise-deployment/en-gb/edg_part6.htm).

### Secure on-premises servers

To prevent users with publish/explore permissions from connecting to Tableau Server resources that they shouldn't have access to, complete the following steps to configure and secure your on-premises servers.

1. Create a PostgreSQL user account.
2. Name it: tbladminviews
3. Select the least privileges for Admin views.
4. Change the Admin views workbook templates to use tbladminviews instead of tblwgadmin.
5. Add connection IP policy to deny private (non-routable) IP addresses:
    
    1. Change connection IP default rule to Allow
        
        tsm configuration set -k ConnectionIPDefaultRule=ALLOW
    2. Deny private (non-routable) IP addresses
        
        tsm configuration set -k ConnectionIPDenyRanges=127.0.0.1,192.168.0.0-192.168.255.255,172.16.0.0-172.31.255.255,10.0.0.0-10.255.255.255

## Tableau Cloud

All communication with Tableau Cloud is encrypted using SSL for secure transmission of data. Clients include the following: a web browser, Tableau Desktop, Tableau Prep Builder, Tableau Bridge, Tableau Mobile and [tabcmd utility](https://help.tableau.com/current/online/en-gb/tabcmd_cmd.htm). Tableau Cloud supports TLS 1.2 and higher. A variety of encryption techniques ensure security from browser to server tier to repository and back. In addition, Tableau has many built-in security mechanisms to help prevent spoofing, hijacking, and SQL injection attacks, and it actively tests and responds to new threats with monthly updates.