Summary #

Paychex offers a service that requires you to connect to their Citrix servers to use it.  This connection typically requires a firewall rule to allow access to the Paychex servers.

Procedure #

To allow this connection to work, you need to create the following firewall rule:

• Name: Paychex
• Log Packets: None
• Type: Allow
• Protocol: TCP
• Direction: From Inside
• Source Address: 0.0.0.0/0 (to allow any workstation.  If you want to allow only one workstation, use its IP address)
• Source Port: leave blank
• Destination Address: 141.123.0.0/16
• Destination Port: 80,443