The connection method for 3CX is determined by the firewall rules. When the 3CX is self-managed, choose the Active connection.  For 3CX Hosted, use the Listening connection

Configuration details for both methods are shown below: