The Tableau CRM Analytics connector is a Palantir-provided driver connector. The official documentation for this driver can be found here ↗.
Networking
If using an agent connection, the agent must be allowed to connect to the system you choose. This means that the agent must be able to reach the destination IP address, and the destination system must be configured to allow connections from the agent.
If using a direct connection, be sure to add the following egress policies to the connector:
Domain
Required
<InstanceURL>
Always. Returned by Salesforce when authenticating; can be set with InstanceURL property when InitiateOAuth=OFF
login.salesforce.com
Only if UseSandbox=FALSE and Subdomain blank
test.salesforce.com
Only if UseSandbox=TRUE
<Subdomain>.cloudforce.com
Only Subdomain connection property is used for custom branded authentication pages