Peplink Balance behind firewall

This post is a good place to start as it lists all the IPs and ports (in the JSON) that you need to talk to InControl: