Use Fanatically Zen With a Firewall or VPN

When using Fanatically Zen, your CRM and Zendesk instances need to be able to communicate with one another. In order for this to work, your CRM needs to be using a URL with a domain name, that is publicly accessible and run over https/ssl on the default port 443. A valid example URL would be something like this: https://crm.your-company.com 

CRM Server Firewall

If you're using a firewall on your CRM server, you'll need to whitelist some IP addresses to ensure you can reach Zendesk and SugarOutfittes/SuiteCRM Store servers.

Zendesk

Zendesk provides a list of IP addresses to whitelist in order to allow Zendesk to communicate with your CRM.  It's worth noting that Zendesk may change these IP addresses as needed. As you'll see in the link below there are many IP addresses that Zendesk requires to be opened. Unfortunately, this is something that is out of our control on the integration side. 

Configuring Your Firewall For Use With Zendesk

SugarOutfitters or SuiteCRM Store

In order for your CRM to reach the SugarOutfitters/SuiteCRM Store server (which is responsible for validating your license), you'll need to also whitelist the IP address below:

54.69.66.36

VPN

If your CRM is behind a VPN, there will need to be a public endpoint that Zendesk is able to access. This endpoint is accessed by Zendesk whenever there is an update to a Zendesk Ticket and that updated needs to be reported to CRM. 

For the VPN proxy URL, depending on which CRM you are using, this is the specific endpoint you need to make publicly accessible: 

Sugar 6 or SuiteCRM

https://{your-crm-url}/index.php?module=FanaticalZendesk&entryPoint=ticketsync

Sugar 7, 8, 9

https://{your-crm-url}/rest/v10/FanaticalZendesk/ticketsync

The VPN proxy URL needs to be using a URL with a domain name, that is publicly accessible and run over https/ssl on the default port 443.