security
13 posts.
How VICIfast hardens your VICIdial box
Every VICIfast server ships with a layered security baseline — firewall, brute-force protection, SSH certificate auth, SIP-TLS, and locked-down VICIdial defaults. Not a stock from-source install.
Read postManaging your dialer's firewall from the portal
The VICIfast firewall portal lets you control which IPs can reach your dialer's SIP and web ports from a branded page in the dashboard.
Read postFree TLS certificates for a cloud VICIdial box
Let's Encrypt provides free, auto-renewing TLS certificates that secure the VICIdial agent and admin web interfaces over HTTPS on any cloud server.
Read postWhich ports to open for VICIdial
A plain-English firewall guide for VICIdial: the SIP and IAX signaling ports, the RTP media range, the web admin and agent ports, and why you almost never expose MySQL.
Read postPutting VICIdial behind HTTPS
Why the VICIdial agent and admin screens need TLS, how to get a certificate, why the browser webphone websocket demands a valid cert, and the basics of redirecting HTTP to HTTPS.
Read postWhen to Turn On Force PW Change for Bulk-Copied Users
Bulk-copied VICIdial users get a password equal to their user number - Force PW Change makes them set a real one on first login. Here is when to use it.
Read postHow to Block Agents From Dialing Out With the agent-nodial Phone Context
Use the Phone Context field on Bulk Phone Insert to point agent phones at a non-existent dialplan context so they cannot place calls outside VICIdial.
Read postHow to keep your monitor and barge feature codes secure
VICIdial's monitor and barge phone codes are unauthenticated on the telephony side. Here's how to keep strangers from dialing into your live calls.
Read postWhat the system-wide IP blacklist blocks
VICIdial's system-wide IP blacklist blocks every web service for any user coming from a listed address, regardless of their user group.
Read postHow to restrict VICIdial logins by IP with IP Lists
Lock VICIdial web access to known networks by building an IP List and assigning it to a user group's admin, agent or API access.
Read postVICIdial login password vs registration password
Two VICIdial phone passwords get confused constantly: the web Login Password and the SIP Registration Password. Here is what each one does.
Read postHow to set a strong VICIdial phone password
The default VICIdial Registration Password is test, which is a security hole. Here is how to pick a strong one within the allowed character set.
Read postEncrypting carrier traffic with TLS and SRTP
TLS encrypts your SIP signaling and SRTP encrypts the audio. Here is when carriers offer it and how to configure the peer.
Read post