Turn off potential risk services of devices controlled by the server (like SSH or Telnet)

[Knight!]

Hello Team,
i have a question regarding Services that can be disabled on controlled VoIP devices due to uselessness but which will not affect the work with the server. I talking about SSH and Telnet services.
On some VoIP devices, function to turn off selected services is present in the web interface, on some it is not.

3CX Management Web interface has or not Security like function to turn off other management Services on Devices ?

If I posted this question in the wrong section, please excuse me, please put this topic in correct selection. ( I have no access to "Ideas" Subfolder for post there )

 

[Pierre_3CX]

Hi,
Which devices models are you referring to specifically and which firmware version are they running please?

 

[Knight!]

Cisco :
VoIP SPA-301 , SPA-303 with FW 7.6.2g
Grandstream :

Gateway GXW4216 with FW 1.0.23.5
DP750 with FW 1.0.17.8

Phones GXP1625 with FW 1.0.7.33
GXP1450 with FW 1.0.8.9

 

[Pierre_3CX]

Hi,
Those phones are EOL / no longer supported so I don't think they'll get any template update, nor know if these can actually be restricted. Supported phones don't have such port open once provisioned.

As for the gateways they typically do have SSH/Telnet port open, this isn't specific to Grandstream, some debug actions are available through these interfaces and vendors decides whether this is enabled or not by default.

In any cases ensure those ports aren't reachable to the WAN and that strong passwords are applied on all devices to avoid any misuse.