Protocol

Port (Default)

Description

Port Forwarding Required

TCP

5001 or 443

v15: HTTPs port of Web Server. This port can be configured.

Yes – if you intend on using a 3CX client, Bridge Presence, Remote IP Phones from outside your LAN and 3CX WebMeeting functionality.

TCP

5015

V15: This port is used for the online Web-Based installer wizard (NOT 3CX config command line tool) only during the installation process.

Optional – During the installation process when the Web-Based installer is used from external source

UDP & TCP

5060

3CX Phone System (SIP)

Yes – if you intend on using VoIP Providers, WebRTC and Remote Extensions that are NOT using the 3CX Tunnel Protocol

TCP

5061

3CX Phone System (SecureSIP) TLS

Yes – if you intend on using Secure SIP remote extensions

UDP & TCP

5090

3CX Tunnel Protocol Service Listener

Yes -if you intend on using remote extensions using the 3CX Tunnel Protocol (within the 3CX clients for Windows / Android / iOS) or when using the 3CX Session Border Controller

UDP

9000-9500 (default)

3CX Media Server (RTP) – WAN audio/video/t38 streams

Yes – if you intend on using remote extensions or a VoIP Provider