Use an SBC to increase your PBX security?

[bignetonline]

I'm new to SBC's, and never used one before today... Can someone clarify, that using an SBC makes the PBX more secure because it doesn't require as many ports be opened on the pbx (https://www.3cx.com/docs/ports/)? Also the traffic from branch locations is tunneled over an encrypted tunnel (SBC -> PBX).

Or do I still need 5060 and 10,000-20,000 open for the sip trunks on the pbx?

Which VOIP providers support 3CX tunnel protocol?

 

[cobaltit]

3CX doesn't use 10,000-20,000. That's a default Asterisk RTP range.

No VoIP providers support the 3CX tunnel protocol as that's not what it's used for.3CX SBC is not a traditional SBC.

3CX Tunnel / 3CX Session Border Controller

I recommend doing some reading up on 3CX. The 3CX Academy is a good place to start.

 

[bignetonline]

Does using an SBC make my 3CX PBX more secure because it exposes fewer ports and the traffic passed is encrypted? Or is the security the same as when you do NOT use an SBC?

 

[leejor]

You'll still have ports "exposed" if you use a SIP provider (or any extensions using STUN, and not the tunnel), but it does encrypt traffic between the SBC and PBX.

 

[cobaltit]

Does using an SBC make my 3CX PBX more secure because it exposes fewer ports and the traffic passed is encrypted? Or is the security the same as when you do NOT use an SBC?

More secure is a relative term. Using a SBC and not changing anything else does nothing as far as exposing fewer ports. And the encryption question is covered in the link I posted. I recommend reading it, and perhaps going through the 3CX academy for better understanding, especially if you are ACTUALLY concerned about security.