Separating web portal from call traffic

[Bembel]

Hello

Is there a way to separate SIP/call traffic from the web portal? At the moment I need to run all traffic through our reverse proxy and decide on the requested URL if allowed or prohibited to not grant access to the management console from the Internet because the iOS and Andriod apps need access to the same IP address/port combination (but different URL) the management console is running on.

For me the easiest way to do this would be a different port/second IP address/addtional NIC or else for the web portal which is only used by myself. No user in the company logs on to the web client or the management console at all but if they would need to I could still route this traffic through VPN and not make it globally available directly from the Internet.

Is there a solution for this?

 

[sip.bg]

Probably this topic could bring some clarification: https://www.3cx.com/community/threa...the-admin-dashboard-on-different-ports.47890/

 

[Bembel]

Probably this topic could bring some clarification: https://www.3cx.com/community/threa...the-admin-dashboard-on-different-ports.47890/

So you basically say that it is not possible at all and traffic has to be dealt with at the gateway/firewall level (that's what I put in place once I realized that the management console would be availabe from the Internet testing the product)?

 

[sip.bg]

Yes, this is the idea. I didn't managed to achieve results in the described way, but should be working in general. Using different ports should be designed by 3CX, like using port 5015 during installation, probably it could remain for accessing web interface (or 80/443).

However if you admin password and webclient passwords are strong, the risk of hacking the PBX is extremely low, if you haven't modified the security settings of the PBX.