How can you restrict use of App for an extension

[AEGIS_SEC_SOL]

I have latest the version of 3CX hosted on Amazon Lightsail. My question is, how can you restrict or block a particular extension from using 3CX app?. Just want them to be able to use desk phone.

 

[Evolute IT]

I have latest the version of 3CX hosted on Amazon Lightsail. My question is, how can you restrict or block a particular extension from using 3CX app?. Just want them to be able to use desk phone.

Since you're probably using an SBC, there's no way to block the app. In other cases, you could have blocked tunnel connections for those extensions, but that blocks the SBC as well.

By the way, for the Webclient/Extension, that can be disabled globally under Settings -> General or per extension.

 

[AEGIS_SEC_SOL]

Since you're probably using an SBC, there's no way to block the app. In other cases, you could have blocked tunnel connections for those extensions, but that blocks the SBC as well.

By the way, for the Webclient/Extension, that can be disabled globally under Settings -> General or per extension.

I am using SBC. Customer does not want the employees to have access to the app, this is a serious drawback.

 

[Evolute IT]

I am Using SBC. Customer does not want the employees to have access to the app, this is a serious drawback.

Since it's Lightsail, you can't allow the port 5090 (tunnel) from their offices IPs only so yes, you have no way to block it right now.

You might be able to block it by selecting the private IP in (bulk edit) -> Phone Provisioning -> 3CX App -> Interface. This would essentially make the app try to connect using a private IP that will never be reachable from there. It would basically block the app from working. Never tested this tho.

 

[AEGIS_SEC_SOL]

Since it's Lightsail, you can't allow the port 5090 (tunnel) from their offices IPs only so yes, you have no way to block it right now.

You might be able to block it by selecting the private IP in (bulk edit) -> Phone Provisioning -> 3CX App -> Interface. This would essentially make the app try to connect using a private IP that will never be reachable from there. It would basically block the app from working. Never tested this tho.

I was able to block it by unchecking 'use 3CX Tunnel for remote connections (3cx app only)' under 3CX app provisioning and disallow use of extension outside the LAN. private IP option didn't work. Let me know if anyone has an alternate way to accomplish this.