Solved Port 443 conflicts with Microsoft Exchange ActiveSync for mobile devices

[jakthree]

According the Step 2 of https://www.3cx.com/docs/manual/firewall-router-configuration, Port 443 is (outbound, TCP) for Google Android Push.
Port 443 conflicts with Microsoft Exchange ActiveSync for mobile devices which we cannot change because ActiveSync is used daily.

Is there a protocol inspector for Android PUSH traffic?
Can port 443 be changed to another port?

Thank you,

 

[nobody]

I assume you have an Exchange Server inside your network?
Outbound traffic to a port wont create a conflict with inbound NAT redirection to a port inside your private network. Most NAT gateways are configured by default so they accept all outbound traffic. Even if your Exchange server would be located outside the perimeter of your private network this will work without problems since googles server and your Exchange server dont share the same IP address.
The only thing you have to check for is if your router has a default policy of deny or allow. If deny is the default policy you have to allow traffic to googles servers (you have to find out the addresses!), or just allow traffic to any IP with destination port 443 (which most likely will be in effect as a default rule).
There is a conflict with exchange if you configure your 3cx system to use port 443 for the management port. Instead you have to choose port 5001

does that help?

 

[jakthree]

nobody,
Yes that helps. I understand better that android PUSH is clearly a port 443 outbound packet that won't be directed to my internal Exchange Server.

As far as inbound provisioning ports. I have standard annual 15.5.15502.6. I have provisioned several IP phones and window, android, iOS clients. How do I confirm that 3CX install setup port 5001 as provisioning port?

Thank you,

 

[nobody]

open your 3cx webconsole. If it is at 5001 then you will be fine. If not, make a complete backup, and reinstall, this time answering with return to use 5001 (this the default if I remeber correct).

 

[jakthree]

Web console does use 5001.
Thank you for the help.
You can set this thread to solved.