3CXPhone Tunnel not connecting

[zarboy]

Hi,

I have 3CXPhone for windows configured to use the tunnel when out of the office however it still attempts to connect on port 5000. It will connect successfully if I allow 5000 though and I can see no attempt on port 5090 at any stage.

The Re-Provision URL is not enabled\selected and the system is a fully patched V12. Remote tunnel connections are allowed but I would at least expect to see traffic on 5090 on the firewall anyway.

Any ideas please?

Thanks,

M

 

[Pierre_3CX]

Hi there,
It will still attempt to reach port 5000 tcp for presence infos, contacts, profile toggle, etc..
HTTP traffic to web server does not pass through tunnel, so you will always have to allow both web port and tunnel port for your remote 3CXPhones.

 

[zarboy]

OK thanks for the quick reply, have you enabled this? It seems quite risky given the details that can be pulled down from the provisioning url...

 

[Pierre_3CX]

You could backup your config, redo the phone system setup selecting HTTPS in setup wizard and inputting correct FQDNs, so that your 3CXPhone can communicate through HTTPS rather than HTTP. Also, note that the risk is low as 3cxconfig files have random filenames.
Furthermore you should filter through your firewall who can access what.