The connection method for 3CX is determined by the firewall rules. 

If the 3CX is self-managed, choose the Active connection.  

For 3CX Hosted, use the Listening connection

Configuration details for both methods are shown below: