Connection from Tableau Desktop to Tableau Server's Postgres is not Encrypted

Version 1

    The connection to the Postgres is not encrypted, even if SSL is being used. This is because the connection is not made through the web service. Tableau Desktop is connecting directly through port 8060 and is not encrypted.

     

    • Tableau does not provide a resource for encrypting the connection.
    • The actual data used for workbooks and reports is not kept in the Postgres. 
    • The only sensitive information kept in the Postgres is passwords, which are encrypted and not accessible by users on Tableau Desktop.

     

    Our recommendation is to only access the Postgres from within a secure internal network.  We also recommend disabling external access to the Postgres except when needed.  Extracts of the Postgres data can be made so that the Postgres only needs to be open at certain times.


    Related Link: Server Encryption