will update nginx version when we update 3cx in management console?

[58voip.com]

will update nginx version when we update 3cx in management console?

if nginx version too old to pass security scan, can we update nginx version manually?

 

[JohnS_3CX]

Hello,

The PBX will update NGINX if needed. We would not recommend to update it manually because it may break compatibility with your PBX if there are changes that the system does not expect.

 

[Alphabetic]

If you're trying to pass a security scan I would recommend either moving your 3CX to another WAN IP or locking down your firewall if you have no remote sites. Or, temporarily close open ports whilst you run the scan.

 

[BrenttG]

Gotta love the mindless PCI Compliance scanners that simply check versions numbers from the connection banner and red flag anything that isn't bleeding edge, most of those companies wouldn't know anything about security if it bit them in the fanny. All they usually tell us is, if the scan passes, you are secure, if it fails, you are not secure, flow chart speak, and most of them are using 3rd party scan tools that they themselves have zero understanding of, not even their own tools...

For the time being, @kieferschild has given you good advise. Its not a bad idea to keep 3CX on a seperate IP not only for this reason, but for many other reasons as well. Then this is less of an issue.

 

[florink]

Gotta love the mindless PCI Compliance scanners that simply check versions numbers from the connection banner and red flag anything that isn't bleeding edge, most of those companies wouldn't know anything about security if it bit them in the fanny. All they usually tell us is, if the scan passes, you are secure, if it fails, you are not secure, flow chart speak, and most of them are using 3rd party scan tools that they themselves have zero understanding of, not even their own tools...

For the time being, @kieferschild has given you good advise. Its not a bad idea to keep 3CX on a seperate IP not only for this reason, but for many other reasons as well. Then this is less of an issue.

Couldn't agree more. These scanners go through a checklist blindly. Also not being on the latest version does not mean you are not secure. There are numerous software that newer versions have vulnerabilities whereas older don't. That doesn't mean of course that you should never update.

Now regarding 3CX, as far as I am aware they are always using an up to date secure and stable version.