SBC Ports

[Tahir]

Can i confirm that on the SBC side of the things on 3CX i can leave only port 5090 and 5001 open, or do i also need to have 5060, 5000-5001, 9000-10999 open as well? As shown here? https://www.3cx.com/docs/3cx-tunnel-session-border-controller/

 

[cobaltit]

https://www.3cx.com/docs/manual/firewall-router-configuration/

I'm not sure what you mean on the SBC side of things. Are you talking about a firewall on the SBC device itself or the firewall in front of the SBC? The SBC makes the outbound connections to the PBX, nothing typically needs to be done unless you are restricting outbound traffic on that firewall.

 

[eddv123]

The 3CX academy slides explain this really well.

Port 5090 only which incorporates your SIP and RTP traffic. Provisioning occurs separately on port 5001/443 normally.

You don't strictly need your provisioning ports open full time, only when setting up your phones.

 

[JohnS_3CX]

Hi Tahir,

If you are talking about two sites (one that has the 3CX server, and one that has the phones+SBC) then each site has its own firewall. Only one side will need firewall setup normally:

On the 3CX Server side:
The guide you mention, talks about the 3CX server side. The 3CX server needs to have all its own ports opened as per https://www.3cx.com/docs/ports/


On the SBC side:
At the site where the phones+SBC are installed, you do not really need to open anything for inbound.

Note: The SBC will open an outbound connection to your PBX so if your firewall allows outbound connections you should not need to do anything else.