Prepared for
Wrenfield Wholesale Ltd
Summary for the owner
Wrenfield Wholesale Ltd runs FreePBX 16.0.40.7, which reaches end of life on 1 January 2027. It sits on Asterisk 18.20.0 and Sangoma Linux 7, already out of support. It still depends on 2 ISDN lines and 3 devices on analogue lines or ports that stop working on 31 January 2027. Planned migration: Hosted phone system (supplier not yet chosen), planned for 1 March 2027. Nothing on the phone system was changed during this survey.
Top risks
- High3 devices depend on analogue lines or ports: Alarm line (dahdi-7), Lift emergency line (dahdi-8), Unidentified device (dahdi-10). Section 9
- High2 ISDN lines close on 31 January 2027: ISDN span 1, ISDN span 2. Section 4
- HighThe planned migration date, 1 March 2027, is after the switch-off on 31 January 2027. Section 4
- HighNo emergency address is recorded for Warehouse. A 999 call from this site may not give the emergency services the right location. Providers must supply caller location under Ofcom General Condition A3. Section 10
- High2 parts of the phone system are out of support: Asterisk 18.20.0, Sangoma Linux 7. Section 1
- HighFreePBX 16.0.40.7: Security fixes only since 1 September 2026; end of life 1 January 2027 (Sangoma says it may reach end of life sooner). Its CentOS 7 base is itself out of support. Section 1
- High2 management interfaces listen beyond the server itself: AMI (Asterisk Manager Interface), Web admin (HTTP/HTTPS). Section 8
What stops working on 31 January 2027
| What | Site | Detail | Status |
|---|---|---|---|
| ISDN2 line ISDN span 1 | Head office and showroom | 2 channels; 50 numbers | Confirmed |
| ISDN2 line ISDN span 2 | Head office and showroom | 2 channels; 2 numbers | Confirmed |
| Alarm line | Head office and showroom | Comms cupboard, ground floor; looked after by Alarm maintenance company | Confirmed |
| Lift emergency line | Head office and showroom | Passenger lift, showroom; looked after by Lift maintenance company | Confirmed |
| Unidentified device | Not known | DAHDI/10 FXS port, extension 293 | Suspected |
“Suspected” items were found from configuration or names and need a named person at the site to confirm them.
Support status
| Part | Found | Status on report date | Dates | Basis |
|---|---|---|---|---|
| Phone system | FreePBX 16.0.40.7 | Security fixes only | Security fixes only since 1 September 2026; end of life 1 January 2027 (Sangoma says it may reach end of life sooner). Its CentOS 7 base is itself out of support. | Vendor |
| Call engine | Asterisk 18.20.0 | Out of support | End of life 20 October 2025. | Vendor |
| Operating system | Sangoma Linux 7 | Out of support | Built on CentOS 7, which no longer receives updates. Sangoma moved FreePBX 17 to Debian. | Vendor |
Sangoma, which owns FreePBX, agreed on 28 September 2026 to be sold to a BRC Group affiliate; completion is expected by early 2027.
Findings: 11 high, 5 medium, 2 low. Each is listed in its section and in the findings register at the end.
1Platform and support
FreePBX 16.0.40.7: Security fixes only since 1 September 2026; end of life 1 January 2027 (Sangoma says it may reach end of life sooner). Its CentOS 7 base is itself out of support.
platform_eol_soon · Seen on the system
Asterisk 18.20.0 is out of support. End of life 20 October 2025.
platform_unsupported · Seen on the system
Sangoma Linux 7 is out of support. Built on CentOS 7, which no longer receives updates. Sangoma moved FreePBX 17 to Debian.
platform_unsupported · Seen on the system
- Phone system
- FreePBX 16.0.40.7
- Call engine
- Asterisk 18.20.0
- Operating system
- Sangoma Linux 7
- Server
- Tower server in the comms cupboard, bought 2017
- Maintained by
- Former installer, ad hoc (no contract)
- Notes
- Nobody has logged in to update it since 2023
- Basis
- Seen on the system; asterisk-files /var/www/html/admin/modules/framework/module.xml and /etc/os-release; questionnaire row 5
Sites
| Site | Type | Extensions | Notes |
|---|---|---|---|
| Head office and showroom | office | 31 | |
| Warehouse | warehouse | 7 | Extensions connect to head office over the site link |
Contracts
| Supplier | For | Ends | Notice | Basis |
|---|---|---|---|---|
| Incumbent line provider | lines | 31 January 2027 | 30 days | Stated by the customerquestionnaire row 7 |
| Former installer | maintenance | none | Stated by the customerquestionnaire row 8 |
Planned migration
- Target
- Hosted phone system (supplier not yet chosen)
- Planned date
- 1 March 2027
- Owner
- Priya Shah, office manager
- Notes
- Quotes requested from two resellers
2Extensions and users
4 extensions made or took no calls between 20 September 2026 and 20 October 2026. Check whether they are still needed before you migrate; each one is a licence and a handset to move.
unused_extension · Seen on the system
38 extensions in total (31 at Head office and showroom, 7 at Warehouse). 4 not used in the capture window.
| Ext. | Label | Site | Type | Last used | Calls | Basis |
|---|---|---|---|---|---|---|
| 201 | Reception | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 18 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [201] |
| 202 | Sales 1 | Head office and showroom | IP phone (SIP)PJSIP | 19 October 2026 | 30 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [202] |
| 203 | Sales 2 | Head office and showroom | IP phone (SIP)PJSIP | 15 October 2026 | 22 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [203] |
| 204 | Sales 3 | Head office and showroom | IP phone (SIP)PJSIP | 19 October 2026 | 26 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [204] |
| 205 | Sales 4 | Head office and showroom | IP phone (SIP)PJSIP | 16 October 2026 | 24 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [205] |
| 206 | Sales 5 | Head office and showroom | IP phone (SIP)PJSIP | 19 October 2026 | 22 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [206] |
| 207 | Sales manager | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 30 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [207] |
| 208 | Customer services 1 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [208] |
| 209 | Customer services 2 | Head office and showroom | IP phone (SIP)PJSIP | 19 October 2026 | 24 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [209] |
| 210 | Accounts 1 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [210] |
| 211 | Accounts 2 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 36 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [211] |
| 212 | Credit control | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [212] |
| 213 | Purchasing 1 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [213] |
| 215 | Purchasing 3 | Head office and showroom | IP phone (SIP)PJSIP | 15 October 2026 | 24 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [215] |
| 216 | Operations manager | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 32 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [216] |
| 217 | Directors office | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 22 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [217] |
| 218 | Finance director | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 26 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [218] |
| 219 | HR | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 26 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [219] |
| 220 | IT | Head office and showroom | IP phone (SIP)PJSIP | 19 October 2026 | 30 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [220] |
| 221 | Meeting room 1 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 20 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [221] |
| 222 | Meeting room 2 | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 36 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [222] |
| 223 | Showroom | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [223] |
| 224 | Transport desk | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 22 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [224] |
| 225 | Despatch office | Head office and showroom | IP phone (SIP)PJSIP | 20 October 2026 | 30 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [225] |
| 226 | Spare desk 1 | Head office and showroom | IP phone (SIP)PJSIP | 14 May 2026 | 0 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [226] |
| 227 | Spare desk 2 | Head office and showroom | IP phone (SIP)PJSIP | none seen | 0 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [227] |
| 228 | Training room | Head office and showroom | IP phone (SIP)PJSIP | 2 August 2026 | 0 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [228] |
| 240 | Goods in | Warehouse | IP phone (SIP)PJSIP | 20 October 2026 | 28 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [240] |
| 241 | Goods out | Warehouse | IP phone (SIP)PJSIP | 20 October 2026 | 18 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [241] |
| 242 | Warehouse office | Warehouse | IP phone (SIP)PJSIP | 19 October 2026 | 34 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [242] |
| 243 | Warehouse supervisor | Warehouse | IP phone (SIP)PJSIP | 19 October 2026 | 24 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [243] |
| 244 | Trade counter | Warehouse | IP phone (SIP)PJSIP | 19 October 2026 | 30 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [244] |
| 245 | Yard cabin | Warehouse | IP phone (SIP)PJSIP | 30 March 2026 | 0 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [245] |
| 246 | Mezzanine | Warehouse | IP phone (SIP)PJSIP | 16 October 2026 | 18 | Seen on the systemasterisk-files /etc/asterisk/pjsip.endpoint.conf [246] |
| 290 | Fax | Head office and showroom | AnalogueDAHDI/9 (FXS port) | 8 November 2024 | 0 | Seen on the systemasterisk-files /etc/asterisk/chan_dahdi.conf channel 9; /etc/dahdi/system.conf |
| 291 | Alarm panel | Head office and showroom | AnalogueDAHDI/7 (FXS port) | 19 October 2026 | 10 | Seen on the systemasterisk-files /etc/asterisk/chan_dahdi.conf channel 7; /etc/dahdi/system.conf |
| 292 | Lift phone | Head office and showroom | AnalogueDAHDI/8 (FXS port) | none seen | 0 | Seen on the systemasterisk-files /etc/asterisk/chan_dahdi.conf channel 8; /etc/dahdi/system.conf |
| 293 | Port 10 | Head office and showroom | AnalogueDAHDI/10 (FXS port) | none seen | 0 | Seen on the systemasterisk-files /etc/asterisk/chan_dahdi.conf channel 10; /etc/dahdi/system.conf |
3Numbers
Calls to 0113 496 0345 are routed to extension 214, which no longer exists. Callers may hear an error or be dropped.
orphan_number · Seen on the system
| Number | Type | Site | Line | Routes to | Basis |
|---|---|---|---|---|---|
| 0113 496 0300 | Main number | Head office and showroom | ISDN span 1 | time condition 1 | Confirmed by Priya Shah, office managerquestionnaire row 11; asterisk-files FreePBX table incoming |
| 0113 496 0301 | Direct dial | Head office and showroom | ISDN span 1 | extension 207 | Seen on the systemasterisk-files FreePBX table incoming |
| 0113 496 0310 | Direct dial | Head office and showroom | ISDN span 1 | queue 400 | Seen on the systemasterisk-files FreePBX table incoming |
| 0113 496 0345 | Direct dial | Head office and showroom | ISDN span 1 | extension 214 Missing | Seen on the systemasterisk-files FreePBX table incoming |
| 0113 496 0350 | Direct dial | Head office and showroom | ISDN span 2 | ring group 601 | Seen on the systemasterisk-files FreePBX table incoming |
| 0113 496 0390 | Fax | Head office and showroom | ISDN span 2 | extension 290 | Confirmed by Priya Shah, office managerquestionnaire row 12; asterisk-files FreePBX table incoming |
4Trunks and lines
ISDN2 line ISDN span 1 at Head office and showroom carries 50 numbers. ISDN closes on 31 January 2027; its numbers must be moved to SIP or another service before then.
isdn_in_use · Confirmed by Priya Shah, office manager
ISDN2 line ISDN span 2 at Head office and showroom carries 2 numbers. ISDN closes on 31 January 2027; its numbers must be moved to SIP or another service before then.
isdn_in_use · Confirmed by Priya Shah, office manager
The planned migration date, 1 March 2027, is after the switch-off on 31 January 2027.
migration_after_switch_off · Stated by the customer
| Line | Site | Type | Channels | Provider | Numbers | On 31 Jan 2027 | Basis |
|---|---|---|---|---|---|---|---|
| ISDN span 1 | Head office and showroom | ISDN2 | 2 | Incumbent line provider | 0113 496 0300 to 0349 | Closes | Confirmed by Priya Shah, office managerquestionnaire row 9; asterisk-files /etc/dahdi/system.conf span 1 (4 B-channels on 2 spans) |
| ISDN span 2 | Head office and showroom | ISDN2 | 2 | Incumbent line provider | 0113 496 0350, 0113 496 0390 | Closes | Confirmed by Priya Shah, office managerquestionnaire row 10; asterisk-files /etc/dahdi/system.conf span 2 (4 B-channels on 2 spans) |
5Call flows
How incoming calls are routed, from each number to where it rings.
- Time condition 1: Office hours (Mon to Fri, 08:30 to 17:30)
- openMenu (IVR) 1: Main menu
- press 0Extension 201
- press 1Ring group 600: Sales (rings 202, 203, 204, 205, 206)
- no answerVoicemail 207
- press 2Queue 400: Accounts (rings 210, 211, 212)
- timeoutVoicemail 210
- press 3Ring group 601: Warehouse (rings 240, 241, 242, 243)
- no answerExtension 201
- no choiceExtension 201
- closedVoicemail 201
- Extension 207
- Queue 400: Accounts (rings 210, 211, 212)
- timeoutVoicemail 210
- Extension 214 (missing)
- Ring group 601: Warehouse (rings 240, 241, 242, 243)
- no answerExtension 201
- Extension 290
6Call recording
Calls are recorded but nobody could say how long recordings are kept or when they are deleted. Recordings must outlive the old phone system if you need them.
recording_retention_unknown · Seen on the system
- Calls recorded
- Yes
- Which calls
- All external calls
- Stored
- On the phone system: /var/spool/asterisk/monitor
- Files
- 120
- Size
- 61 MB
- Oldest recording
- 4 March 2019
- Retention
- Nobody knows; recordings have never been deleted
- Card payments (PCI) pause or masking
- None: card numbers are read out on recorded calls
- Requirements stated
- Card payments (PCI DSS); Quality and training
- Basis
- Seen on the system; asterisk-files file count and dates in /var/spool/asterisk/monitor (no recording opened); questionnaire row 16
Recording metadata only: no recording was opened or listened to.
7Integrations and call data
| Integration | Type | Connected by | Call data goes to | Runs on | Basis |
|---|---|---|---|---|---|
| Call records via cdr_adaptive_odbc | REPORTING | connection=asteriskcdrdb | Asterisk CDR backend | Seen on the systemasterisk-files /etc/asterisk/cdr_adaptive_odbc.conf (connection names only) | |
| Call records to CSV (cdr_csv) | REPORTING | /var/log/asterisk/cdr-csv/Master.csv | Seen on the systemasterisk-files /var/log/asterisk/cdr-csv/Master.csv exists | ||
| Desktop caller pop-up (CTI) | CTI | Connects to the phone system manager interface (AMI) over the office network | none | Reception PC | Stated by the customerquestionnaire row 19 |
| Monthly call report spreadsheet | REPORTING | Accounts download call records from the admin screen each month and copy them by hand | Spreadsheet on the finance share | Finance PC | Stated by the customerquestionnaire row 20 |
8Security exposure
AMI (Asterisk Manager Interface) listens on 0.0.0.0 port 5038, not just on the server itself. It should be limited to the server (127.0.0.1) or a management network.
mgmt_exposed · Seen on the system
/etc/freepbx.conf holds credentials and any user on the server can read it (permissions 644 root:root). Only its location was recorded.
credential_file_readable · Seen on the system
Web admin (HTTP/HTTPS) listens on 0.0.0.0, :: port 80, 443, not just on the server itself. It should be limited to the server (127.0.0.1) or a management network.
mgmt_exposed · Seen on the system
Management interfaces
| Interface | Listens on | Port | Reachable from | Basis |
|---|---|---|---|---|
| AMI (Asterisk Manager Interface) | 0.0.0.0 | 5038 | Any network | Seen on the systemasterisk-files /etc/asterisk/manager.conf [general] bindaddr |
| ARI (Asterisk REST Interface) over the Asterisk HTTP server | 127.0.0.1 | 8088 | This server only | Seen on the systemasterisk-files /etc/asterisk/http.conf [general]; /etc/asterisk/ari.conf |
| MySQL/MariaDB database | 127.0.0.1 | 3306 | This server only | Seen on the systemasterisk-files ss -ltn listening sockets |
| Web admin (HTTP/HTTPS) | 0.0.0.0, :: | 80, 443 | Any network | Seen on the systemasterisk-files ss -ltn listening sockets |
Admin accounts
| Account | Factory-default password | Shared | Basis |
|---|---|---|---|
| AMI user 'admin' | No | Not checked | Seen on the systemasterisk-files /etc/asterisk/manager.conf [admin], compared on the host |
| AMI user 'cti' | No | Not checked | Seen on the systemasterisk-files /etc/asterisk/manager.conf [cti], compared on the host |
Where credentials are stored
| File | Permissions | Readable by any user | Holds |
|---|---|---|---|
/etc/freepbx.conf | 644 root:root | Yes | database or interface credentials |
/etc/amportal.conf | 640 root:root | No | database or interface credentials |
/etc/asterisk/manager.conf | 640 root:root | No | database or interface credentials |
/etc/asterisk/manager_additional.conf | 640 root:root | No | database or interface credentials |
/etc/asterisk/ari.conf | 640 root:root | No | database or interface credentials |
/etc/asterisk/res_odbc_additional.conf | 640 root:root | No | database or interface credentials |
/etc/asterisk/pjsip.auth.conf | 640 root:root | No | SIP device passwords |
Locations and yes/no checks only. No password, key or token was read into this report; default passwords were compared on the server and only the result kept.
9PSTN dependency register
Alarm line (dahdi-7) at Head office and showroom (Comms cupboard, ground floor) depends on an analogue line or port. Alarm signalling to the monitoring centre can fail after the switch-off; the alarm company must move it to a dual-path IP or 4G signaller. Your insurer may require this.
analogue_dependency · Confirmed by Tom Reid, facilities
Lift emergency line (dahdi-8) at Head office and showroom (Passenger lift, showroom) depends on an analogue line or port. The lift's emergency phone can fail after the switch-off; the lift maintainer must replace or re-route it. Lift emergency phones are a safety requirement.
analogue_dependency · Confirmed by Tom Reid, facilities
Unidentified device (dahdi-10) depends on an analogue line or port. Until someone identifies it, assume it will stop working on 31 January 2027.
analogue_dependency · Inferred
Unidentified device (dahdi-10) is suspected, not confirmed. A named person at the site must confirm what is plugged in, where it is and who looks after it.
analogue_unconfirmed · Inferred
Fax (dahdi-9) at Head office and showroom (Accounts office) appears to be unused. Confirm and cease it rather than migrate it.
analogue_unused · Confirmed by Priya Shah, office manager
| ID | Device | Site and location | Port or line | Owner | In use | Status | Action |
|---|---|---|---|---|---|---|---|
| dahdi-7 | Alarm lineIntruder alarm panel, monitored | Head office and showroom: Comms cupboard, ground floor | DAHDI/7 FXS port, extension 291 | Alarm maintenance company | Yes | Confirmedby Tom Reid, facilities | Ask the alarm company for a dual-path IP or 4G signaller. |
| dahdi-8 | Lift emergency lineLift car emergency phone | Head office and showroom: Passenger lift, showroom | DAHDI/8 FXS port, extension 292 | Lift maintenance company | Yes | Confirmedby Tom Reid, facilities | Ask the lift maintainer to replace the lift line. |
| dahdi-9 | FaxFax machine | Head office and showroom: Accounts office | DAHDI/9 FXS port, extension 290 | Wrenfield (office) | No | Confirmedby Priya Shah, office manager | Confirm whether it is needed; cease it or move to e-fax. |
| dahdi-10 | Unidentified devicePort 10 (FXS port 10) | DAHDI/10 FXS port, extension 293 | Not known | Suspectedasterisk-files /etc/asterisk/chan_dahdi.conf channel 10; /etc/dahdi/system.conf | Identify the device and its owner. |
10Emergency calling
No emergency address is recorded for Warehouse. A 999 call from this site may not give the emergency services the right location. Providers must supply caller location under Ofcom General Condition A3.
no_emergency_address · Confirmed by Priya Shah, office manager
| Site | Emergency address recorded | Where | Address | Basis |
|---|---|---|---|---|
| Head office and showroom | Yes | Incumbent line provider | 1 Example Way, Leeds (as held by the line provider) | Confirmed by Priya Shah, office managerquestionnaire row 21 |
| Warehouse | No | Confirmed by Priya Shah, office managerquestionnaire row 22 |
Your line or cloud provider holds the address the emergency services see. Ask them to confirm it for every site and number; this survey did not change any emergency setting.
Recommended next steps
- This week, call your alarm company and your lift maintainer. Tell them the line their equipment uses closes on 31 January 2027 and ask for a written date to move it. Engineers are busy before the deadline, so book early.
- Ask your line provider for a migration date for every ISDN and analogue line. Openreach has said there is no extension. Orders must be placed by 31 January 2027, and orders completing after 31 March 2027 are cancelled. Single lines not moved in time go onto a temporary, paid holding service that may not work for every line, so move your numbers to SIP or another service now.
- Confirm every suspected device. Walk the site with the PSTN dependency register (section 9). For each item, record what is plugged in, who looks after it and whether it is still needed, and name the person who confirmed it.
- Get an emergency address recorded for every site. Ask your provider to record and confirm the address for each site and number, and check it again after any move.
- Decide what replaces or upgrades the phone system. It is out of support or close to it. Options include an upgrade to a supported version, a hosted phone system or Teams Phone. Use sections 2 to 5 of this report as the inventory for quotes.
- Set a migration date before 31 January 2027. Allow time for number porting and for testing every number after the move.
- Ask your maintainer to close the security gaps in section 8. Limit management interfaces to the server or a management network, change any factory-default password and tighten file permissions. This survey changed nothing.
- Fix or cease the numbers that route nowhere. Point each one at a working destination, or cease it with your provider so you stop paying for it.
- Remove extensions nobody uses before you migrate. Each one costs a licence and a handset on the new system.
- Write down how long recordings are kept. Make sure recordings you must keep are exported from the old system before it is switched off.
- Keep this report as your inventory. It is the list to check the new system against after the move.
How we can help
Migration Reconciliation
After your move, we check that every number, opening-hours schedule, menu and overflow on the new system matches what the old one did, and give you a signed-off list of differences. Read-only on both systems. Founding offer: book within 60 days of this survey (offer open to 31 January 2027) and the survey fee is credited against it.
Call Data Out
Your call records, exported read-only into CSV, SQL or Power BI and reconciled each day, so missed calls and response times are visible. It keeps the old system's call history available after it is switched off.
Joiners and Leavers (in development)
Approved, audited changes to extensions when people join or leave. Not yet available; ask to be told when it is.
To arrange any of these, contact Sample Partner Ltd, 0113 496 0999, survey@example.co.uk.
How this survey was done, and its limits
- Read-only. Nothing on the phone system, lines or devices was changed, no call was placed and no setting was saved.
- Information came from the phone system's configuration files, read with a read-only account; the questionnaire, answered by named people at your business.
- Call records from 20 September 2026 to 20 October 2026 were read for counts and last-use dates only. Caller and called numbers were not kept, no call content was read and no recording was opened.
- Passwords, keys and tokens were never recorded. Where a default password was checked, only the yes or no answer was kept.
- Each item shows its basis: “Seen on the system” (read by a survey tool), “Inferred” (deduced from names or port types), or “Stated” or “Confirmed” by a named person.
- Items marked “Suspected” need confirmation by a named person before you rely on them. Devices on analogue lines often are not visible to the phone system at all, so walk the site too.
- Support dates come from the vendor where marked “Vendor”; “Reported” dates come from resellers or the trade press and have not been confirmed with the vendor.
- This report is an inventory and risk survey. It is not a certification, a compliance assessment or legal advice.
Findings register
| Priority | Code | Section | Subject | Basis |
|---|---|---|---|---|
| High | platform_eol_soon | 1 | FreePBX 16.0.40.7 | Seen on the systemasterisk-files /var/www/html/admin/modules/framework/module.xml and /etc/os-release; questionnaire row 5 |
| High | platform_unsupported | 1 | Asterisk 18.20.0 | Seen on the systemasterisk-files /var/www/html/admin/modules/framework/module.xml and /etc/os-release; questionnaire row 5 |
| High | platform_unsupported | 1 | Sangoma Linux 7 | Seen on the systemasterisk-files /var/www/html/admin/modules/framework/module.xml and /etc/os-release; questionnaire row 5 |
| High | isdn_in_use | 4 | ISDN span 1 | Confirmed by Priya Shah, office managerquestionnaire row 9; asterisk-files /etc/dahdi/system.conf span 1 (4 B-channels on 2 spans) |
| High | isdn_in_use | 4 | ISDN span 2 | Confirmed by Priya Shah, office managerquestionnaire row 10; asterisk-files /etc/dahdi/system.conf span 2 (4 B-channels on 2 spans) |
| High | migration_after_switch_off | 4 | migration | Stated by the customerquestionnaire row 23 |
| High | mgmt_exposed | 8 | AMI (Asterisk Manager Interface) | Seen on the systemasterisk-files /etc/asterisk/manager.conf [general] bindaddr |
| High | analogue_dependency | 9 | Alarm line (dahdi-7) | Confirmed by Tom Reid, facilitiesquestionnaire row 13; asterisk-files /etc/asterisk/chan_dahdi.conf channel 7; /etc/dahdi/system.conf |
| High | analogue_dependency | 9 | Lift emergency line (dahdi-8) | Confirmed by Tom Reid, facilitiesquestionnaire row 14; asterisk-files /etc/asterisk/chan_dahdi.conf channel 8; /etc/dahdi/system.conf |
| High | analogue_dependency | 9 | Unidentified device (dahdi-10) | Inferredasterisk-files /etc/asterisk/chan_dahdi.conf channel 10; /etc/dahdi/system.conf |
| High | no_emergency_address | 10 | Warehouse | Confirmed by Priya Shah, office managerquestionnaire row 22 |
| Medium | orphan_number | 3 | 0113 496 0345 | Seen on the systemasterisk-files FreePBX table incoming |
| Medium | recording_retention_unknown | 6 | recordings | Seen on the systemasterisk-files file count and dates in /var/spool/asterisk/monitor (no recording opened); questionnaire row 16 |
| Medium | credential_file_readable | 8 | /etc/freepbx.conf | Seen on the systemasterisk-files stat /etc/freepbx.conf |
| Medium | mgmt_exposed | 8 | Web admin (HTTP/HTTPS) | Seen on the systemasterisk-files ss -ltn listening sockets |
| Medium | analogue_unconfirmed | 9 | Unidentified device (dahdi-10) | Inferredasterisk-files /etc/asterisk/chan_dahdi.conf channel 10; /etc/dahdi/system.conf |
| Low | unused_extension | 2 | 226, 227, 228, 245 | Seen on the system |
| Low | analogue_unused | 9 | Fax (dahdi-9) | Confirmed by Priya Shah, office managerquestionnaire row 15; asterisk-files /etc/asterisk/chan_dahdi.conf channel 9; /etc/dahdi/system.conf |
Sources for dates
- House of Commons Library, CBP-9471 (PSTN switch-off): https://researchbriefings.files.parliament.uk/documents/CBP-9471/CBP-9471.pdf
- Mobile Europe, Openreach PSTN deadline: https://www.mobileeurope.co.uk/openreach-pstn-deadline/
- BT Wholesale, WLR stop sell has begun: https://www.btwholesale.com/news-and-resources/news-insights-events/insights/wlr-stop-sell-has-begun.html
- Sangoma, FreePBX Versions: https://sangomakb.atlassian.net/wiki/spaces/FP/pages/653197359/FreePBX+Versions
- Business Wire, Sangoma to be acquired by BRC Group Holdings (28 Sep 2026): https://www.businesswire.com/news/home/20260928333255/en/Sangoma-Technologies-Corporation-Enters-into-Definitive-Agreement-to-be-Acquired-by-BRC-Group-Holdings-Inc.
- Asterisk, Asterisk Versions: https://docs.asterisk.org/About-the-Project/Asterisk-Versions/
- Asterisk Community, Asterisk 18 end of life: https://community.asterisk.org/t/asterisk-18-end-of-life-asterisk-21-security-fix-only/110650
- Ofcom, General Condition A3 enforcement (caller location): https://www.ofcom.org.uk/phones-and-broadband/telecoms-infrastructure/ofcom-fines-gigaclear-122500
Dates were checked on 16 October 2026. Vendors change them; check the source before relying on a date.