The following is a complete list of ports that 3CX PhoneSystem uses in a default installation scenario:\\

^Protocol ^Port ^Description ^Port Forwarding Required^
|TCP |5000 |**v12.5:** This port can be configured by the administrator.\\ **v12:** The port used for the 3CX Management Console, Presence Updates for 3CX Phone V12 (and 3CX MyPhone V11), the 3CX Hotel Module, 3CX Web Reports, 3CX Wallboard – whether using Abyss or IIS. |Yes – if you intend to make this available from outside your LAN|
|TCP |5001 |**v12.5:** This port can be configured by the administrator.\\ **v12:** HTTPS Access ONLY – The port used for the 3CX Management Console, Presence Updates for 3CX Phone V12, the 3CX Hotel Module, 3CX Web Reports, 3CX Wallboard – whether using Abyss or IIS. |Yes – if you intend to use 3CX Phone from outside your LAN|
|UDP & TCP |5060 |3CX Phone System (SIP) |Yes – for communication with VoIP Providers, WebRTC and Remote Extensions that are NOT using the 3CX Tunnel Protocol|
|TCP |5061 |3CX Phone System (SecureSIP) |Yes – for communication with remote extensions via SecureSIP|
|UDP & TCP |5062 |**v12.5:** 3CX WebRTC. Note: This port should only be used for 3CX WebRTC. If you have other services running on this port, you then need to change the port in the 3CX Management Console > “WebRTC Gateway” > “Gateway Port” entry field. For this change to take effect, a restart of the web server is required. |No|
|UDP & TCP |5080, 5081, etc |Listener for the 3CX Tunnel Protocol for bridge connections. Each tunneled bridge connection binds to a port number incrementally. This is a local port used for inter-process communication (not for the connection between the phone systems) |No|
|UDP & TCP |5090 |3CX Tunnel Protocol Service Listener |Yes – for communication with remote extensions using the 3CX Tunnel Protocol (within 3CX Phone for Windows / Android / iPhone) or using the 3CX SIP Proxy Manager|
|UDP |5100 |3CX Fax Receiver Service (SIP) |No|
|TCP |5480 |3CX Phone System Database Server (PostgreSQL) |No – connections to the Database Engine from outside the 3CX Phone System machine should not be allowed|
|TCP |5482 |3CX Phone System Inter-Process communications |No|
|TCP |5484 |3CX IVR Service (vXML) |No|
|TCP |5485 |3CX Configuration Service |No|
|UDP |7000-7499 (default) |3CX Media Server (RTP) – LAN audio/video/t38 streams |No|
|UDP |7500-7599 (default) |**v12.5:** Local Port for media communication 3CX WebRTC |No|
|UDP |9000-9099 (default) |3CX Media Server (RTP) – WAN audio/video/t38 streams |Yes|
|UDP |9100-9199 (default) |**v12.5:** External media transmission for 3CX WebRTC |Yes|
|UDP |40000 |3CX Parking Orbit Service (SIP) |No|
|UDP |40010-40138 |3CX Parking Orbit Service (RTP) |No|
|UDP |40300 |3CX Conference Room Service (SIP) |No|
|UDP |40310-40438 |3CX Conference Room Service (RTP) |No|
|UDP |40600 |3CX IVR Service (SIP) |No|
|UDP |40610-40866 |3CX IVR Service (RTP) |No|
|TCP |4516 |Port used for Data communication for Wallboard |Yes – if you intend to make the Wallboard functionality available from outside your LAN|
|**The following ports no longer apply to V12 and later**||||
|TCP    |4515    |Port used for Data communication for MyPhone |Yes – if you intend to make the MyPhone \\ functionality available from outside your LAN|