Protocol

Port (Default)

Description

Port Forwarding Required

TCP

5001 or 443

v15+: HTTPs port of Web Server. This port can be configured.

Yes – if you intend on using a 3CX client, Bridge Presence, Remote IP Phones from outside your LAN and 3CX WebMeeting functionality.

TCP

5015

V15+: This port is used for the online Web-Based installer wizard (NOT 3CX config command line tool) only during the installation process.

Optional – During the installation process when the Web-Based installer is used from external source

UDP & TCP

5060

3CX Phone System (SIP)

Yes – if you intend on using VoIP Providers, WebRTC and Remote Extensions that are NOT using the 3CX Tunnel Protocol

TCP

5061

3CX Phone System (SecureSIP) TLS

Yes – if you intend on using Secure SIP remote extensions

UDP & TCP

5090

3CX Tunnel Protocol Service Listener

Yes -if you intend on using remote extensions using the 3CX Tunnel Protocol (within the 3CX clients for Windows / Android / iOS) or when using the 3CX Session Border Controller

UDP

9000-10999 (default)

3CX Media Server (RTP) – WAN audio/video/t38 streams

Yes – if you intend on using remote extensions or a VoIP Provider

TCP

443

3CX WebMeeting Audio and Video. Not to be opened on the PBX. Must be opened on the network on which the webmeetings will take place.

Yes – if you intend on using 3CX WebMeeting

TCP

2528

3CX SMTP Server – Must allow PBX passthrough on the network for the PBX to send email notifications via the 3CX SMTP.

No