Per systech tech support, the following outbound ports need to be open locally for the systech device to authorize CC. 443 needs to also be set up for incoming also.
80 For Universal Time
42 DNS
443 paymentech specific
10001 for remote access
10002 for remote access
If the client is using a sonic wall, the user login & timer restriction may need to disabled. I discovered this with Rain Urbana.