> Am 09.06.2020 um 10:04 schrieb Michael Knill > <michael.kn...@ipcsolutions.com.au>: > > Hi Group > > Well although we are coping fine during COVID-19 and haven’t really lost any > business yet, its now only a matter of time that we will. > I'm getting increased pressure from clients that they need simple remote > working solutions for both desktop and smartphone as they are suspecting the > new norm will not be everyone sitting in the office with a phone on their > desk. > > In the light of this, I am struggling to build something for an standard > Asterisk based system that's going to be moderately secure. Yes OpenVPN from > Yealink phones is awesome but its not a mobile solution and people are sick > of bringing phones into the office and back home. > > 3CX has a nice remote client and it looks like I'm going to lose at least one > customer to this product. Its easy to set up and appears to do it more > securely via a tunnelling protocol. > Bria is great but I just don't know how to secure it other than using a VPN. > > Does anyone have any ideas before I start using 3CX to keep business? > > Regards > > Michael Knill
Hi Michael, I just looked into the 3CX Windows softphone. You are right, they are using a special proprietary tunnel protocol to their own SBC on port 5090. https://www.3cx.com/docs/3cx-tunnel-session-border-controller/ https://www.3cx.com/docs/3cx-sbc-raspberry-pi/ But it seems everyone is using the same Tunnel password (no user authentiation for the tunnel!). So if one user is hacked or lost its device, then you would need to reconfigure the tunnel with a new password for all users. I personally would not want this, but I don't know the exact details of the tunnel. You can do the same, but much safer with OpenVPN or WireGuard. It's a bit more work to setup the client on each device. WireGuard works fine on mobile phones. Otherwise you just use SIP over TLS with SRTP without a VPN. Michael http://www.mksolutions.info _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
