SEC_IGNORE_USER_AGENT setting keeps reverting back?

[jroozee]

I keep removing OZEKI from the SEC_IGNORE_USER_AGENT setting because we have developed our own inhouse Softphone that uses the OZEKI SDK. However, for some reason, the SEC_IGNORE_USER_AGENT keeps reverting back and the "OZEKI" keeps getting put back in the list. Why is this happening?

 

[jroozee]

BUMP

 

[cobaltit]

I mean there's like one option and that's that 3CX is doing it, seeing as how they populate that in the first place. I'm assuming they have some sort of maintenance or scheduled script that downloads a list from somewhere so they can keep it updated.

 

[jroozee]

Well I figured that is what is happening.... But its happening almost daily! But that shouldn't happen. What's the purpose of being able to customize these settings if they revert back within 24 hours?

Without being able to keep ozeki out of this param setting, we would never be able to use our inhosue softphone. That's a problem.

 

[cobaltit]

I would imagine it's happening daily via a scheduled task. And the point is you aren't supposed to be making changes there unless 3CX tells you to as it says at the top of that screen:

This page allows editing of advanced options. Only use this after having been recommended to do so by 3CX Technical Support. ADVANCED USERS ONLY!

I think you need to find a different SDK or find a way to change how it identifies itself (which may not be allowable based on whatever license it was released under). You could try a post in the ideas forum to get a parameter to 'whitelist' one or to not sync/update the list but I wouldn't hold my breath.

 

[florink]

SEC_IGNORE_USER_AGENT_CUSTOM is what you are looking for.

 

[cobaltit]

SEC_IGNORE_USER_AGENT_CUSTOM is what you are looking for.

Are you sure about that? The description makes me thing that's where you can add additional agents you want to block besides the 3CX defaults.


List of custom user agents in comma separated form that are by default used in security and hacking tools. 3CX will immediately ignore any responses and act dead

 

[florink]

You are right, I misread the original post!

 

[cobaltit]

Ok. I thought maybe you had tested it and it was just worded wrong in the description. That would have been too easy of a fix!

 

[jroozee]

Seems pointless to allow parameter customization if the customization doesn't stick.

 

[JohnS_3CX]

Seems pointless to allow parameter customization if the customization doesn't stick.

Hi @jroozee

Please note that not all parameters exist for users to customize. We state clearly on the parameters page "Only use this after having been recommended to do so by 3CX Technical Support".

This specific parameter cannot be customized, it will auto-update as you have noticed and the reason is due to security concerns with known bad agents. Since this won't be removed from our list any time soon, the only solution in this case would be to customize your OZEKI agent to send a different name.