Solved Disabling Instance Manager

[Dave100]

Hi,

I know that remote management is disabled by default in the 3CX pbx but, as part of our internal security assessment for new applications, I am interested to know how that prevents the pbx from being able to be remotely managed.

When 'Allow remote management of this pbx' is not selected, is the remote management functionality/code/service disabled on the pbx itself or is the functionality always enabled on the pbx and that tick box just administratively disables access to it in the cloud portal?

Thanks,
Dave

 

[StefanW]

Hello @Dave100

the instance manager, first of all, is not root in the system but runs as its own user.
When the permission level is changed on the PBX, this alters the local permissions of the instance manager on the host to reflect this. Additionally, the interface is locked in your customer portal to reflect this to avoid "dead" buttons.

 

[Dave100]

Thanks very much Stefan for the response and the information.

I also noticed that nikosT_3CX also replied with some additional info, but the post seems to have disappeared.

 

[NickD_3CX]

Hi @Dave100 ,

It may have contained a bit too much information for the average user, but to answer your questions simpler and more directly, when you disable the "Allow remote management of this pbx" option on your 3CX, we disable code execution, it is not just an administrative way of not sending data to the Instance Manager server.

 

[Dave100]

Thanks very much @NickD_3CX, that clarifies it for me.