We have determined through testing with our customers, that the return traffic from multiple BI tools is on a random TCP port – this includes Power BI, Tableau, and many other widely used BI tools on the market. What this means is that in order for a database connection to succeed behind a firewall (especially if you have your own proxy in place) our customers usually need a couple of rules established on their network firewall:
1. A rule to allow all outbound traffic on Port 2000
2. A rule which allows all TCP Inbound traffic (this is usually defined as an any/any rule) for the connecting address/IP - provided to your team during implementation.