Dear Team
We have observed that the 3cx Web Client or Management Console is blacklisting entire public IP addresses due to failed login attempts. While it’s possible to whitelist known IPs, we are concerned about the broader impact of this approach.
Thank you for your assistance.
We have observed that the 3cx Web Client or Management Console is blacklisting entire public IP addresses due to failed login attempts. While it’s possible to whitelist known IPs, we are concerned about the broader impact of this approach.
- Could you clarify if failed login attempts in the console or web client result in the entire IP being blacklisted, and if so, why individual users cannot be blacklisted instead? Is there a setting available that allows us to block only specific users rather than the entire IP address?
- Additionally, if an IP is blacklisted, will this affect all 3cx system activities originating from that source IP, such as calling from the 3cx Desktop Applications?
- Furthermore, If we whitelisted our known IP's and a user breaches the login attempts with wrong credentials the source IP will not be blacklisted but does user account will get locked instead?
Thank you for your assistance.
