The documentation only says that the port for tabadmincontroller (default 8850) must be opened to Internet. But a full opening of this port is not possible for security reasons. It could be opened only for specific addresses, to which the connexion should be initiated by our server. That's why I would need the list of tableau.com servers or adresses accessed in the activation step
4 answers
This has more specifics: https://help.tableau.com/current/desktopdeploy/en-us/desktop_deploy_proxy.htm. If you need, you can do an offline activation for security reasons.