My Vendor Said to Uninstall Antivirus and Turn Off Firewall

Discussion in '3CX Phone System - General' started by Jono, Aug 19, 2014.

Thread Status:
Not open for further replies.
  1. Jono

    Joined:
    Jun 29, 2013
    Messages:
    27
    Likes Received:
    0
    Hello -

    The vendor that we used to install 3CX and gave us support for the first year told us that we shouldn't have anti-virus installed on the 3CX server. He also said to turn off the Windows firewall. As a security-conscious SysAdmin, I'm very uncomfortable with leaving our 3CX server exposed like that.

    Is it true that 3CX will not run correctly with anti-virus installed and the firewall on? It seems like that computer is very exposed to malware and hacking. It's behind our hardware firewall, but it still seems dangerous to have no anti-virus or firewall protection on the computer itself.

    We are using a Windows 7 Pro SP1 machine as the 3CX server. That computer is not used for anything else but 3CX.

    Thanks for any advice you can give.

    Jono
     
  2. tsukraw

    tsukraw New Member

    Joined:
    Mar 9, 2012
    Messages:
    190
    Likes Received:
    7
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    It is a very common practice in our installs to leave the windows firewall off and to not have AV installed.

    I always relate this to other phone systems. If you have say a shoretel that is running a flavor of Linux as its base OS would you be concerned about having a firewall on it or AV on it?

    Or back in the in the day with 3COM and there VCX which is running a flavor of linux. Again no firewall or AV.

    As long as the phone system has a password and is dedicated to ONLY being a phone system i don't see a issue with running it without AV or a firewall because nothing besides phone activities will be happening.

    Malware/viruses are not going to get installed on the system since you are not using it on the internet for anything other then phone system activates, and the odds of a virus on your local LAN being able to remotely access the system, figure out the password, and install themselves is highly unlikely.

    That all being said i have had customer who absolutely refuse to not have AV on the system.
    In those cases we still do require the windows firewall to be off, AV ONLY installed, NON of the network intrusion prevention or firewalls pieces can be installed. And then exclude the 3CX directories from scanning. Never seen a issue with AV being loaded as long as you follow that practice of exclusion and AV only.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. gschwab

    gschwab New Member

    Joined:
    Mar 21, 2012
    Messages:
    131
    Likes Received:
    0
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    I have 3CX running on a Windows 7 Pro machine with Trend Micro anti virus running AND the Windows firewall on, works without any problems at all. You might have to change the firewall settings to allow 3CX to pass through and most anti virus products allow you to change settings for your programs to run, if in doubt contact the products tech support.
    I did however disable anti virus and firewall before installing 3CX, then turn them back on and make the necessary changes to them.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. complex1

    complex1 Active Member

    Joined:
    Jan 25, 2010
    Messages:
    764
    Likes Received:
    39
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    I do totally agreed with tsukraw. :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Jono

    Joined:
    Jun 29, 2013
    Messages:
    27
    Likes Received:
    0
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    Thanks everyone!
     
  6. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,586
    Likes Received:
    252
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    I run the Windows Firewall/Defender, but don't run an anti-virus program as nothing else gets downloaded or installed on the machine. I do keep a recent clone of the hard-drive handy along with even more recent 3CX backups.
     
  7. bardissi

    bardissi Member

    Joined:
    Jan 31, 2012
    Messages:
    318
    Likes Received:
    0
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    I agree.

    Windows without the firewall and av .... i wouldnt feel comfortable with any scenario with that
     
  8. 3CXNP

    3CX Support

    Joined:
    Apr 25, 2014
    Messages:
    42
    Likes Received:
    0
    Re: My Vendor Said to Uninstall Antivirus and Turn Off Firew

    Hi Jono,

    As long as the PC/Server running the PBX is not used for anything else, you shouldnt have a problem.

    Make sure your firewall policy is only allowing the relevant ports to go to the PBX.
    Dont use the PBX for anything else, other than being a PBX. If you need to research something, use another PC.
    be wary of any USB Sticks/Drives you insert (for backups)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.