What are best practices to build a secure system with minimum exposure of local network to the Internet?

[greychain]

We have several banking customers that need to minimise exposure of their internal network to the Internet and to ensure 3CX is not used to gain access.

Our normal installation is to have 3CX connected to the Internet via a suitable firewall (Fortigate) and to lockdown the external access to the server the best we can, however some customers would like to further reduce the exposure.

What are the alternate solutions?

 

[TheodorosG_3CX]

There are many practices regarding security but there are many more that the PBX already offers. You may check the below guideline:
• https://www.3cx.com/docs/voip-security/
but always keep in mind that users need also to be aware of the security and get trained as well. Check also the below security series for more information:
• https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-1/
• https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-2/
• https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-3/
• https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-4/