> Am 09.06.2020 um 12:00 schrieb Michael Knill > <michael.kn...@ipcsolutions.com.au>: > > Hi Michael > > Yes I have used Bria with Wireguard on iPhone and it works great while its in > the foreground. > Push notifications are the only option to wake up the application from the > background which don't work if you are using VPN. > > Regards > Michael Knill
But this behavior is dependend on the smartphones operating system, right? Does the 3CX smartphone app behave different? > On 9/6/20, 7:08 pm, "Michael Keuter" <li...@mksolutions.info> wrote: > > > >> Am 09.06.2020 um 10:04 schrieb Michael Knill >> <michael.kn...@ipcsolutions.com.au>: >> >> Hi Group >> >> Well although we are coping fine during COVID-19 and haven’t really lost any >> business yet, its now only a matter of time that we will. >> I'm getting increased pressure from clients that they need simple remote >> working solutions for both desktop and smartphone as they are suspecting the >> new norm will not be everyone sitting in the office with a phone on their >> desk. >> >> In the light of this, I am struggling to build something for an standard >> Asterisk based system that's going to be moderately secure. Yes OpenVPN from >> Yealink phones is awesome but its not a mobile solution and people are sick >> of bringing phones into the office and back home. >> >> 3CX has a nice remote client and it looks like I'm going to lose at least >> one customer to this product. Its easy to set up and appears to do it more >> securely via a tunnelling protocol. >> Bria is great but I just don't know how to secure it other than using a VPN. >> >> Does anyone have any ideas before I start using 3CX to keep business? >> >> Regards >> >> Michael Knill > > Hi Michael, > > I just looked into the 3CX Windows softphone. You are right, they are > using a special proprietary tunnel protocol to their own SBC on port 5090. > > https://www.3cx.com/docs/3cx-tunnel-session-border-controller/ > > https://www.3cx.com/docs/3cx-sbc-raspberry-pi/ > > But it seems everyone is using the same Tunnel password (no user > authentiation for the tunnel!). So if one user is hacked or lost its device, > then you would need to reconfigure the tunnel with a new password for all > users. I personally would not want this, but I don't know the exact details > of the tunnel. > > You can do the same, but much safer with OpenVPN or WireGuard. It's a bit > more work to setup the client on each device. WireGuard works fine on mobile > phones. > > Otherwise you just use SIP over TLS with SRTP without a VPN. > > Michael > > http://www.mksolutions.info > > > > > > _______________________________________________ > Astlinux-users mailing list > Astlinux-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > pay...@krisk.org. > > > _______________________________________________ > Astlinux-users mailing list > Astlinux-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > pay...@krisk.org. Michael http://www.mksolutions.info _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.