Change port from 5001 to 443

[Ronin]

Hello,

We have an ongoing 3cx installation on port 5001.
In the 3cx blog, it's mentioned that 3cx is strongly recommended to run on HTTPS port 443.
How can we make the change without the need to reprovision all the 3cx windows clients with a new 3cx welcome email & all the 3cx mobile apps with a new qr code?

 

[Saqqara]

You can not change the port number from 5001 to 443 without reinstalling 3CX and provisioning all clients

I doubt there is an different in 3CX running on 443 or 5001 - the security / setup is the same - just the port number is different.

Port 5001 is probably slight more secure, and the internet scanners will test port 443 and not 5001

What blog are you talking about ?

 

[Ronin]

Hello Saqqara,

You can check it here: https://www.3cx.com/blog/releases/v18-video-conference/

 

[Saqqara]

Thanks for the link,

There are saying to use port 443, if you use 3CX video conferencing and the end user tries to connect from restricted networks (for example - enterprise, hotel and airport internet access) as port 5001 maybe blocked, where port 443 should be open.

 

[Ronin]

This is correct. We have experienced this with participants in larger organizations that run configured firewalls.
How can we make an easy transition from 5001 to 443 though?

 

[NickD_3CX]

This is correct. We have experienced this with participants in larger organizations that run configured firewalls.
How can we make an easy transition from 5001 to 443 though?

There is no documented "easy" way I'm afraid. The documentation says that you need to take a backup, uninstall, re-install, restore backup during installation and during this process, also set the new ports.

There is something you *could* try but it isn't official:
Do the whole re-installation as mentioned above, open port 80/443 on the firewall, but if possible, redirect port 5000/5001 to 80/443 respectively.
If you have users with IP Phones, 'legacy' Windows Clients, Mobile Apps, Desktop Apps. ask them to explicitly exit these applications, then re-launch them.
What will hopefully happen is that they will first contact the server on 5001, retrieve their config which now will point to 443.
Once everyone has confirmed they have done this, you can close 5000/5001 completely and just leave 80/443.

What will NOT update with this are:
- Users that are using the WebClient and have it as a Bookmark
- V18 Meeting links users may already have, these will have to be either rescheduled, or the participants somehow informed that they need to remove the port.

Again, this is not an official procedure, so it may not work on all devices, so be prepared to have to reconfigure all endpoints.