Installing the 3CX SBC (Session Border Controller) for Windows
Zero Admin
With the new Dashboard
Bulletproof Security
With SSL certs and NGINX
Install on $150 Appliance
Intel MiniPC architecture
New, Intuitive Windows Client
More themes, more UC
More CRM Integrations
Scripting Interface to add your own
Improved Integrated Web Conferencing
iOS and Android apps included
Personal Click2Meet URLs

Installing the 3CX SBC (Session Border Controller) for Windows

Installing the 3CX SBC (Session Border Controller) for Windows

On this topic

Installing the 3CX SBC (Session Border Controller) for Windows


Required Details

Install and Configure 3CX SBC for Windows


The 3CX SBC is deployed to remote offices where there are more than 2 or 3 IP Phones, to direct only their signaling through the 3CX Tunnel and keep the media streams local which reduces the amount of internet bandwidth that local calls between phones use. SBC will bundle all SIP traffic over a single TCP port which simplifies your deployment by reducing firewall configuration. In addition 3CX SBC will add stability & security and allow you to easily manage and provision your IP Phones remotely.

3CX SBC for Windows should be installed on a Windows machine which is not used by users. If you have up to 5 users in your remote office you can use 3CX SBC for Raspberry Pi. For more than 5 users, then it is recommended to use 3CX SBC for Windows.

Required Details

To configure 3CX SBC you will be asked for some details from your 3CX Phone System.

You will need:

  1. The “Password” for your 3CX Phone System Tunnel. You can find by going to your 3CX Management Console, Expand the “Settings” node > “Security” > “3CX Tunnel” tab > “Tunnel Password” field.
  2. The Tunnel Port Number (default 5090) this is located under the tunnel password in the “Tunnel Listening port” field.
  3. The FQDN which you can find under the Settings” node > “Network” > “FQDN” tab.
  4. The SIP Port Number (default 5060) you can find this under the Settings” node > “Network” > “Ports” tab > “SIP Port” field.

Install and Configure 3CX SBC for Windows

To install and configure the 3CX SBC:

  1. Download the 3CX SBC for Windows.
  2. Launch the Installer

  1. Enter the details for your 3CX Phone system:
  • Public IP address or FQDN of the 3CX Phone System Server.
  • 3CX Phone System SIP Port: Default 5060.
  • 3CX Tunnel Port: Default 5090. 

Choose your configuration and click “Next”, to continue.

  1. 3CX SBC has the ability to connect your remote office to another standby 3CX Phone System in the case where the 3CX Primary Server is no longer reachable. If you have a standby failover server configure Choose Enable Failover and enter the public ip of your standby 3CX Phone System Server. Click “Next”, to continue.

  1. Enter “Tunnel Password”: which you can get from “Settings” > “Security” > “3CX Tunnel” > “Tunnel Password”.
    Enable Encryption to add an extra layer of security by encrypting all calls passing through the 3CX SBC and the 3CX PBX. This requires 3CX Phone System Version 14 and higher. Click
    “Next”. The installation will proceed and the 3CX SBC service will start.

You might also be interested in:

Ask a Question

Please only post questions in regards to the document you are currently reading.
Technical support or pre sales questions must be posted via the support or sales channels and such comments will be deleted. Thank you for understanding

Leave a Reply

  1. Abdullah

    Is it possible to use Dynamic IP address in the public / External IP field like

    July 10, 2015 at 12:41 pm Reply
    • Charalambos Eleftheriou

      @Abdullah, HI, Dynamic DNS is not supported. You need to have a static IP Address.

      July 10, 2015 at 12:48 pm
  2. Dave

    Has any benchmarking been done with the Windows version? Just curious what the actual limitations are.

    September 1, 2015 at 12:22 am Reply
    • Charalambos Eleftheriou

      @Dave, Thanks for the question. The Windows version of 3CX SBC can cope with many extension and simultaneous calls providing that you use the same specifications for the SBC machine as you use for the 3CX Phone System machine as specified in our hardware recommendation. for example, you have 10 extensions and 4 simultaneous calls, the PBX machine is built with the recommended specifications to handle 4 simultaneous calls, the SBC machine should be built to the same specification as the PBX machine. 3CX SBC is really meant to be used for small remote offices to connect to a 3CX Phone System when the site does not warrant their own full 3CX Phone System installation. If you have a large number of extensions and a large simultaneous call license then it is always best to install a 3CX Phone System.

      September 1, 2015 at 10:35 am
  3. For remote users that have the phones at home and work on a terminal server session in a data center with 3cx Softphone in CTI mode, will SBC allow them to connect to the phone system and allow their CTI mode softphones to see and work with their home phones?

    September 25, 2015 at 8:41 pm Reply
    • Charalambos Eleftheriou

      @Ivan, thanks for the question. Installing an SBC on a remote network will allow the control of an IP Phone from 3CXPhone for Windows CTI mode.

      September 26, 2015 at 6:49 pm
  4. David Moss


    Our ISP has started blocking port 5060 outbound which means we can’t make any outbound calls from our 3CX phone system. We have a VPN to another site where the ISP is not blocking port 5060 outbound and I wondered if there was a way to install SBC at the remote site, connect to the remote site over the VPN and then make outbound calls via the SBC. Inbound calls are fine. The SIP trunk provider can’t listen on any other port.

    Any helpful advice appreciated! If anyone has another idea then I’d be happy to listen to that, except get a new ISP…

    Thank you.

    October 6, 2015 at 5:17 pm Reply
    • Charalambos Eleftheriou

      @David, Thanks for the question. Its seems your options are limited. If your ISP is blocking port 5060 then you will have issues using these ports. Even more so with the SIP provider not being able to listen to any other port other than 5060. Unfortunately there is not much we can suggest, apart from opening a ticket with our team so that they can investigate this further with you and see if a solution can be found using a different range of ports. If you don’t have a support contract with us you can ask your 3CX partner / distributor to open a ticket on your behalf.

      October 6, 2015 at 6:08 pm
  5. Why there is no option to just use it as a SIP PROXY (to keep the media streams local only), without tunnel?

    This should be useful for places connected by VPN.

    In that case the tunnel will not connect since VPN are local network, and the tunnel IP need to go to external network…

    I think that you should consider that idea.


    February 11, 2016 at 10:38 pm Reply
  6. so what after that ?
    how to connect the office phones ? i already have installed 3CX in Germany and now in Dubai office how to use this service? please complete the training,

    March 20, 2016 at 7:35 pm Reply
  7. Spring

    Does SBC can install on any kind of Windows?

    March 24, 2016 at 4:24 am Reply
  8. Pingback: 3CX SBC - Neu 3CX Session Border Controler V.14 - 3CX - Schweiz

  9. Mark

    After installing 3cx SBC for windows, how can you open or launch the UI?

    I cant seem to get it to load after installing sbc

    Thank you

    May 19, 2016 at 7:58 pm Reply
    • Charalambos Eleftheriou

      @Mark, There is no GUI for the SBC. After you configure and connect it to your PBX the service will run in the background.

      May 19, 2016 at 8:11 pm
    • Mark

      @Charalambos Thank you for clarifying that. Also since it has no GUI how can I get the IP to use for the SBC for windows when provisioning phones?

      May 20, 2016 at 7:13 pm
    • Charalambos Eleftheriou

      @Mark, When installing the SBC there is no requirement for an IP. The IP that you will see in the management console will be the IP of the machine that the SBC is installed on. Please watch this video as it will give you a better understanding how to provision phones with the Windows SBC:

      May 20, 2016 at 7:18 pm
  10. mark

    Thank you for the help

    May 21, 2016 at 1:08 am Reply
    • Jhun Sanchez

      I am new to 3CX and SBC, just like to ask after installing 3CX Session border controller, how will you link the SBC to your phone and to 3CX server.

      At the moment the phones are working but i wanted to use SBC on the remove area, Installed SBC but have no idea how will it link to 3CX server and Yealink T42 phones.

      Thanks so much!

      June 22, 2016 at 10:16 am
    • Charalambos Eleftheriou

      @Jhun, to connect the phone through the SBC you will have to factory reset them then they will appear in the Phones node within the management console behind the SBC, from there you will be able to right click and assign them to the extensions.

      June 22, 2016 at 3:18 pm
  11. Mark

    Another questions, with sbc using raspberrypi, you can restart the SBC services. Can you also do this on Windows SBC? If yes, how can you restart the Windows SBC services?

    July 8, 2016 at 7:01 pm Reply