Protect certain Public Address or Intercom SIP Devices from External (and Internal) calls

[shak]

Hi,

We wanted to add some Public Address and Door Intercom Devices (Algo - nice products) to 3CX, but I'm concerned about security.

We don't want anyone from our SIP Trunks (PSTN) to be able to dial the associated extensions.

We'd ideally like to limit who can access them internally as well.

As per other posts, the only tool that seems to be available to achieve the above is the Forwarding Rules / Exceptions, and we'd have to enter something like:

* 0-9
* 00-99
* 000-999
* 0000-3456
(allow 3457, 3458 to dial it)
* 3459-9999
* 00000-99999 .... and so on, until we've exhausted all possible incoming CIDs.

Is there a better way? None of the Options / Restrictions seem to help with this scenario.

Extension Groups only seem to help with phone book / presence visibility.

If I set up another 3CX instance just for this, I'd need another Enterprise license to trunk them.

May be eliminate any PBX and configure some direct SIP phonebook entries with firewall rules... (although that doesn't seem possible with these products).

Ideas?

Thanks

 

[cobaltit]

You don't need an enterprise license for bridging. But yes this is a weak point for 3CX. You may be able to restrict access on the device itself.