Ports Used by 3CX Phone System v14
Zero Admin
With the new Dashboard
Bulletproof Security
With SSL certs and NGINX
Install on $100 Appliance
Intel MiniPC architecture
New, Intuitive Windows Client
More themes, more UC
More CRM Integrations
Scripting Interface to add your own
Improved Integrated Web Conferencing
iOS and Android apps included
Personal Click2Meet URLs

Ports Used by 3CX Phone System v14 and v15

The following is a complete list of ports that 3CX Phone System uses in a default installation scenario:

Protocol Port (Default) Description Port Forwarding Required
TCP 5000 or 80 v15: HTTP port of Web Server (only accessible from LAN). This port can be configured.
This port can be configured when Webserver is Abyss. On IIS it is fixed to 80
This port can be configured by the administrator.
v12: The port used for the 3CX Management Console, Presence Updates for 3CX Phone V12 (and 3CX MyPhone V11), the 3CX Hotel Module, 3CX Web Reports, 3CX Wallboard – whether using Abyss or IIS.
V15:  No, this port can only be access from the local network
V14: Yes – if you intend to make this available from outside your LAN
TCP 5001 or 443 v15: HTTPs port of Web Server. This port can be configured.
This port can be configured when Webserver is Abyss. On IIS it is fixed to 443
This port can be configured by the administrator.
v12 (Optional):  The port used for the 3CX Management Console, Presence Updates for 3CX Phone V12, the 3CX Hotel Module, 3CX Web Reports, 3CX Wallboard – whether using Abyss or IIS.
Yes – if you intend to use 3CX Phone, Bridge Presence and Remote IP Phones from outside your LAN
UDP & TCP 5060 3CX Phone System (SIP) Yes – if you intend to use VoIP Providers, WebRTC and Remote Extensions that are NOT using the 3CX Tunnel Protocol
TCP 5061 3CX Phone System (SecureSIP) TLS Yes – if you intend to use SecureSIP remote extensions
UDP & TCP 5090 3CX Tunnel Protocol Service Listener Yes -if you intend to use remote extensions using the 3CX Tunnel Protocol (within 3CX Phone for Windows / Android / iPhone) or when using the 3CX Session Border Controller
UDP 9000-9255 (default) 3CX Media Server (RTP) – WAN audio/video/t38 streams Yes – if you intend to use remote extensions or VoIP Provider
UDP 9256-9500 (default) V14: External media transmission for 3CX WebRTC Gateway V14: Yes – if you intend to the inbound call function via WebRTC

You might also be interested in:

Ask a Question

Please only post questions in regards to the document you are currently reading.
Technical support or pre sales questions must be posted via the support or sales channels and such comments will be deleted. Thank you for understanding

Leave a Reply

  1. Vijay Ayar

    We are not able to find Network tab under 3cx 14 sp1 setup. I have installed virtue instance and created one instance. But not finding Network tab option under setting
    I was getting same network option for 3cx 12 Sp1.
    So can you please do the needful

    October 23, 2015 at 2:26 pm Reply
    • Charalambos Eleftheriou

      @Vijay, thanks for the question. In a 3CX Phone System Virtual PBX Server instance there is no network tab. What do you need to do?

      October 23, 2015 at 3:42 pm
  2. Greg

    Why in v14 are the ports not configurable? This poses a HUGE problem for the vast majority of clients as those ports are already in use. I absolutely need the ability to use IIS but cannot use port 443 or 80. I also see a lot of other people that are concerned with this. Is there a plan to allow these ports to be changed in a future service pack or update? If not, why not? This will be a deal breaker for a lot of potential customers. Also, many existing customers will not be able to upgrade to the latest version for that reason.

    October 28, 2015 at 1:38 am Reply
    • @Greg – you can configure the HTTP Ports – You just cannot use IIS. Why do you absolutely need IIS?
      The end user BOB doesn’t care what webserver is in the background.
      We do not want to co exist with any other webserver. And on port 80 IIS you will have a website. We need port 80 locally. So if you are not in a position to dedicate 1 IIS to 3CX Phone System (which is perfectly reasonable) then use ABYSS.
      In V14 SP1 we made a huge performance update for Abyss – we will be publishing news on this soon. You can have hundreds of connections with Abyss and is now much more stable.

      October 28, 2015 at 5:15 pm
  3. I am installing the demo software at present. Looking at your port configuration, if I only have 1 external IP address and I already have ADFS (Unmoveable) on port 443 then I am not going to be able to run 3cx on IIS. Is this a correct assumption?

    Or do I have a choice of using a different protocol and therefore different ports? I plan to connect to URL Networks as our VOIP provider and I also want to use the WebRTC meeting components.

    November 5, 2015 at 7:02 am Reply
    • @Reef – If you have 1 public IP and you already have an unmovable service on port 443, then you must use ABYSS. Abyss is an inbuilt webserver which we install inside the 3CX Package. If you want the same performance as IIS on ABYSS, then you need to use 3CX Phone System Version 14 SP1 (Latest release) because we made a critical speed improvement.
      The choice of choosing different ports comes with Abyss only.

      November 5, 2015 at 8:26 am
  4. Dave V

    How do you change the ports each tenant uses in V14.

    March 5, 2016 at 9:16 pm Reply
    • Charalambos Eleftheriou

      @Dave, If you are referring to 3CX Virtual PBX server then the ports are assigned automatically to instances depending on their position. There is no way to change the ports manually.

      March 5, 2016 at 10:39 pm
  5. Kenneth


    In V14, how do I determine what the SIP Port number is?

    In V12, I would click Settings->Network

    March 10, 2016 at 7:50 pm Reply
    • Charalambos Eleftheriou

      @Kenneth, if you are using 3CX single instance install then this is in the same place. If this is a virtual PBX server (multi instance) then ports are assigned automatically depending on the position number of the instance. To work out the Sip port of an instance check under ‘Settings’ > ‘Security’ > ‘3CX Tunnel’ tab and locate the the tunnel port. If the tunnel port is XXX90 then the Sip port will be XXX60. More information on the Virtual PBX server can be found here: http://www.3cx.com/docs/virtual-pbx-installation/

      March 10, 2016 at 8:12 pm
  6. Hi
    Running 3CX ver 14 sp 3 and trying to get the firewall checker passing, I have found that I need ports 3478 and 3479 UPD open for the test to past. However its not mentioned in the table above. Are they only need for the firewall checker or do they need to be open all the time?


    June 10, 2016 at 12:39 pm Reply
    • Charalambos Eleftheriou

      @Ian, These ports are not required to be open and forwarded for the PBX.

      June 10, 2016 at 12:49 pm