Solved Does 3CX PBX 'contact home'

[jakthree]

trial standard annual 3CX 16 SC v15.5.56602.6 on-premise windows VM (or linux ISO)
All SIP trunks are FXO ports on an internal gateway. No external SIP trunk or VoIP provider used.
Most extensions are internal phones.
One 3CX andriod client used internal and external.
One 3CX iOS client used internal and external.

I want to know if there should be any traffic thru my firewall other than the 3CX clients.
Does the on-premise 3CX PBX server have any reason to contact (call home) 3CX?
If yes, then what ports are used and why?
Does the PBX report back usage/diagnostics...?

Thank you,

 

[cobaltit]

Yes 3CX phones home. It checks license status and does report back basic information. In v16 there is supposed to be a central management panel (for partners) to have an overview of all their customers so we can see things like backup status, etc.

 

[jakthree]

The IT/IS department is responsible for overseeing all traffic in/out of our LAN. They will want to know about any traffic created by 3CX. The department is efficient and will block unknown IP addresses. Better safe than sorry.
What firewall port(s) does 3CX use to phone home?
What IP address or FQDN of 'home'?
Thank you,

 

[nub]

The IT/IS department is responsible for overseeing all traffic in/out of our LAN. They will want to know about any traffic created by 3CX. The department is efficient and will block unknown IP addresses. Better safe than sorry.
What firewall port(s) does 3CX use to phone home?
What IP address or FQDN of 'home'?
Thank you,

3cx wants to talk to:
activation.3cx.com

[3CXTunnel.exe]
TCP 192.168.*** 151.80.125.88:https ESTABLISHED
[3CXManagementConsole.exe]
TCP 192.168.*** 151.80.125.88:https ESTABLISHED
[3CXManagementConsole.exe]
TCP 192.168.*** 151.80.125.88:https ESTABLISHED
[3CXManagementConsole.exe]
TCP 192.168.*** 151.80.125.88:https ESTABLISHED

 

[cobaltit]

If the IT department is that efficient then it shouldn't be much of an issue for them to fire up a trial and look at the logs to see what it is doing and then restrict based on that.

 

[jakthree]

That solves my question.
Thank you