Hi Michael
Yes I have used Bria with Wireguard on iPhone and it works great while its in
the foreground.
Push notifications are the only option to wake up the application from the
background which don't work if you are using VPN.
Regards
Michael Knill
On 9/6/20, 7:08 pm, "Michael Keuter" <li...@mksolutions.info> wrote:
> Am 09.06.2020 um 10:04 schrieb Michael Knill
<michael.kn...@ipcsolutions.com.au>:
>
> Hi Group
>
> Well although we are coping fine during COVID-19 and haven’t really lost
any business yet, its now only a matter of time that we will.
> I'm getting increased pressure from clients that they need simple remote
working solutions for both desktop and smartphone as they are suspecting the
new norm will not be everyone sitting in the office with a phone on their desk.
>
> In the light of this, I am struggling to build something for an standard
Asterisk based system that's going to be moderately secure. Yes OpenVPN from
Yealink phones is awesome but its not a mobile solution and people are sick of
bringing phones into the office and back home.
>
> 3CX has a nice remote client and it looks like I'm going to lose at least
one customer to this product. Its easy to set up and appears to do it more
securely via a tunnelling protocol.
> Bria is great but I just don't know how to secure it other than using a
VPN.
>
> Does anyone have any ideas before I start using 3CX to keep business?
>
> Regards
>
> Michael Knill
Hi Michael,
I just looked into the 3CX Windows softphone. You are right, they are using
a special proprietary tunnel protocol to their own SBC on port 5090.
https://www.3cx.com/docs/3cx-tunnel-session-border-controller/
https://www.3cx.com/docs/3cx-sbc-raspberry-pi/
But it seems everyone is using the same Tunnel password (no user
authentiation for the tunnel!). So if one user is hacked or lost its device,
then you would need to reconfigure the tunnel with a new password for all
users. I personally would not want this, but I don't know the exact details of
the tunnel.
You can do the same, but much safer with OpenVPN or WireGuard. It's a bit
more work to setup the client on each device. WireGuard works fine on mobile
phones.
Otherwise you just use SIP over TLS with SRTP without a VPN.
Michael
http://www.mksolutions.info
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
