Q: Do we need a static NAT so that MAZEMAP can communicate with it ? Specifically this would be required if we require inbound access rules on the Firewall not just outbound. If outbound only required we can use a PAT instead.

A: We do not need inbound access.

Q: Is the network configuration in the MazeMap Admin Tool with IP adresses/ranges necessary for positioning in general or just necessary when setting up the LIPI

A: It’s required for the LIPI only

Q: Does the LIPI need internet (not just HSCN) facing IP And DNS record?

A: Yes. The lipi pull it's configs from api.mazemap.com so it need to reach the internet for that. This is however done only on-startup.
The dns records to reach the lipi are currently on the domain mazepos.com . Its the only domain that will work with our ssl certificate.

Q: Does the LIPI need to connect out or are things connecting into the server and if so on what port.

A. Port 443. The lipi will log it's liveness to our database so that we can know if it is live or not. This is not required for the lipi to work though