connect 3cx over wan

i have sophos xg 135 and 3cx in internal network .

i have to allow some users to make a call from 3cx over wan .

how can in configure sophos to do this?