Port 5000 open

[craigreilly]

Does anyone keep port 5000 open on their firewall?
What are the risks?

We are deploying some remote extensions - and this is the port used for Remote Phonebook.

 

[eagle2]

IIS has some filtering capabilities to keep management, reporting, provisioning, etc content limited to LAN addresses, and perhaps avail myphone, etc. to the world at large.

Abyss.. not so much.

yes, exactly

I had a version 11 system hacked this way (with *9+number) via http api, in version 12 this is limited to LAN addresses, so this vulnerability is already safe.

 

[complex1]

Now, when someone scans your PBX for port 5000 to get into the Management console, they will need to authenticate. Make sure you have a strong password, which can not be brokn into within 25 attempts. This is a limit defined in the Security settings of the PBX.

Is it possible to reduce this amount of attempts to e.g. 10 attempts?
And if so, in which file?

Thank you.