3CX website not working on HTTP from outside firewall

[luis.ramos]

Hello,

I have 3CX working perfectly on a company network. The website is accessible from both port HTTP 80 (for phone provisioning) and HTTPS 443 (for webclient and management).

However, I recently opened the firewall ports to allow phones to work from outside. But I have one issue. I made port 1180 redirect to port 80 on the 3CX sever, and, although I can see the webserver and it answers, it replies with an xgnix error 404. I try a phone provsioning link with http and I get that 404 error (http://fqdn/provisionig/secret/0123456789.xml).

If I go to the router and change the port redirection to 443, the exact same link (now with https, https://fqdn/provisionig/secret/0123456789.xml), works perfectly and I get the XML file.

Do you have any idea of why HTTP does not work from outside the firewall?

Thanks,

Luis

 

[leejor]

Is this of any help?
https://www.3cx.com/community/threads/provisioning-link-not-accessible-via-http-5000.51212/

 

[CentrexJ]

The https port is supposed to work from outside your network. Http port is not needed from outside firewall so it is disabled. This is for your security and intentional. External stun and sbc phones provision over https and the web client and mobile clients all use https and tunnel ports only.

 

[luis.ramos]

Thanks, @CentrexJ for your answer. I agree that HTTP is inherently insecure, but I was trying to get a phone working from outside the firewall to make sure everything else is working fine.

@leejor's link solved my problem.

Thank you both.