> Am 09.06.2020 um 12:00 schrieb Michael Knill 
> <michael.kn...@ipcsolutions.com.au>:
> 
> Hi Michael
> 
> Yes I have used Bria with Wireguard on iPhone and it works great while its in 
> the foreground.
> Push notifications are the only option to wake up the application from the 
> background which don't work if you are using VPN.
> 
> Regards
> Michael Knill

But this behavior is dependend on the smartphones operating system, right?
Does the 3CX smartphone app behave different?

> On 9/6/20, 7:08 pm, "Michael Keuter" <li...@mksolutions.info> wrote:
> 
> 
> 
>> Am 09.06.2020 um 10:04 schrieb Michael Knill 
>> <michael.kn...@ipcsolutions.com.au>:
>> 
>> Hi Group
>> 
>> Well although we are coping fine during COVID-19 and haven’t really lost any 
>> business yet, its now only a matter of time that we will.
>> I'm getting increased pressure from clients that they need simple remote 
>> working solutions for both desktop and smartphone as they are suspecting the 
>> new norm will not be everyone sitting in the office with a phone on their 
>> desk.
>> 
>> In the light of this, I am struggling to build something for an standard 
>> Asterisk based system that's going to be moderately secure. Yes OpenVPN from 
>> Yealink phones is awesome but its not a mobile solution and people are sick 
>> of bringing phones into the office and back home.
>> 
>> 3CX has a nice remote client and it looks like I'm going to lose at least 
>> one customer to this product. Its easy to set up and appears to do it more 
>> securely via a tunnelling protocol.
>> Bria is great but I just don't know how to secure it other than using a VPN.
>> 
>> Does anyone have any ideas before I start using 3CX to keep business?
>> 
>> Regards
>> 
>> Michael Knill
> 
>    Hi Michael,
> 
>    I just looked into the 3CX Windows softphone. You are right, they are 
> using a special proprietary tunnel protocol to their own SBC on port 5090.
> 
>    https://www.3cx.com/docs/3cx-tunnel-session-border-controller/
> 
>    https://www.3cx.com/docs/3cx-sbc-raspberry-pi/
> 
>    But it seems everyone is using the same Tunnel password (no user 
> authentiation for the tunnel!). So if one user is hacked or lost its device, 
> then you would need to reconfigure the tunnel with a new password for all 
> users. I personally would not want this, but I don't know the exact details 
> of the tunnel.
> 
>    You can do the same, but much safer with OpenVPN or WireGuard. It's a bit 
> more work to setup the client on each device. WireGuard works fine on mobile 
> phones.
> 
>    Otherwise you just use SIP over TLS with SRTP without a VPN.
> 
>    Michael
> 
>    http://www.mksolutions.info
> 
> 
> 
> 
> 
>    _______________________________________________
>    Astlinux-users mailing list
>    Astlinux-users@lists.sourceforge.net
>    https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>    Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to