3CX PBX behind a PAN-500

Showing results for 
Show  only  | Search instead for 
Did you mean: 

3CX PBX behind a PAN-500

L1 Bithead

After about a week of trial and error, the Palo Alto Network engineers have told me that my PAN-500 does not support the 3CX phone system. I am told that a future feature request will resolve flow based NAT issue I am having with STUN traffic. Unfortunately, I have already bought the server and all new IP phones and the changeover is 2 weeks away.


After searching several technical sites for answer, including PAN and 3CX community sites, I can see references to other issues with IP phones, 3CX and PAN, so it seems like this setup is working somewhere. Does anyone have 3CX working behind a PAN firewall? Would you be willing to share rules / setup? Even if your setup is a work around, I might be able to limp along while Palo Alto works on feature request 3214, which is supposed to fix the problem.


Thanks, Jim



L2 Linker

Yes, we have one site with a PA200 running 3CX without any issues, PM me to discuss your current config and i can share our ruleset and config.

Great! Thanks Alex. I will PM as soon as I determine how to do that. I can't find instructions on private messages here. I found the "powered by Lithium" tag and searched for the instructions over there. I have a support request into the PAN community which may be answered tomorrow.



Alex - the support team told me that the private messaging feature is not enabled in PAN Live Community.  Are you on Spiceworks? If so, private messaging works there - I am jim9817.

Hi Alex


I'm in the same situation: in our office we have a PaloAlto 220 and we have the same issues with 3CX ... we tried all ideas we have but no positive results: ports are fowarded randomly... Then we have seen your post:  can you help me? Can you send me your working configuration?

Thank you very much in advance and have a great day.


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!