I’m an Android person, and haven’t used Sangoma Talk, but I assume that the same rules apply to telephony applications on iPad as on iPhone and that they will be put to sleep in a way that requires a push service to wake them up before they will listen for an incoming call. I’d therefore assume that they need access to the push server used to support Sangoma Talk, which will be on the public internet.