What IP and port do I need to allow my firewall to route for Intelio products?

All Intelio products deployed to customer sites communicate with Intelio servers via a VPN tunneled through the Internet. In order to do this, they need to be connected to an IP network that has access to the VPN server. The connection is always established from the car wash site to the VPN server; no inbound connections are used.

Simply put, the car wash site's network needs access to:

Additionally, sites that use Intelio to process credit cards need to have access to the credit card processing gateway or host. The most common gateway is Authorize.Net. In this case, the network also needs access to:

More Details:

Source: Intelio node
Destination: 209.11.249.195
Port: 2372
Protocol: UDP
Reason: OpenVPN connection for 172.18.x.x network.
Source: Intelio node
Destination: 209.11.249.195
Port: 2373
Protocol: UDP
Reason: OpenVPN connection for 172.19.x.x network.
Source: Intelio node
Destination: 209.11.249.195
Port: 2374
Protocol: UDP
Reason: OpenVPN connection for initial configuration (172.30.x.x)
Source: Intelio node
Destination: 209.11.249.195
Port: 2375
Protocol: UDP
Reason: OpenVPN connection for 10.0.x.x network. (For customers that use a 172.x.x.x network internally.)
Source: Intelio node
Destination: Credit Card Authorizer - 64.94.118.65 for Authorize.net
Port: 443
Protocol: SSL/HTTP (aka:https)
Reason: Processing credit cards.

Link: