Blocking Extension from Registering Outside office

[Yellow_Flash]

Hi,

We are using a 3CX V20 Debian install.

Is there a way to block the extensions from registering in the Android App?
During the covid time, we had provided everyone with access to Android App to make and receive calls.
Now, the organization wants all that access to be removed.
I remember that, before there was an option to block all registrations from outside the LAN, that seems to be missing now.
All i can see now is, "Block remote non-tunnel connections".
Even when i activate this option, the android app seems to be registering to the 3cx server. I believe it might be using tunnel connection?
Presence is working, they are able to make calls too..

The only other option i found is to disable external calls, but this isn't feasible as they wont be able to make calls from their office phones either.

Is there a way to block the Apps from registering or from making calls?

Thank you in Advance.

 

[KyriacosS_3CX]

Hello,

Are these accounts that normally use desk phones or the Web apps?
Is the PBX generally needed to be available online as a public web service, or can you limit HTTPS access to specific IPs/networks?

 

[Yellow_Flash]

They normally use Deskphones, but were given access to Android Apps because of the Work from Home requirements.
Limiting the access to certain IP's will be a problem, as there are certain users who still does work from home and they need the connectivity.

There were two settings, i believe in V16 and previous versions, where we can block connections from outside LAN and to allow/block tunnel connections, this used to block all the registration attempts, even the 3cx android registration used to get blocked.
Now, it seems to be not there for some reason.
This was a helpful settings.

From what i saw so far, the only way to restrict calls is to "disable external calls", which wont work in our case as these are users who need to make external calls, but from office and not outside office through their Apps.

Why is Apps given such unrestricted access in the first place? As an admin we should be able to dictate which apps can be used and not used.
I believe there was an option in previous 3cx versions to block the "webclient/App",which made it impossible for users to use these.