Nick, I'd like a little clarification on this as well.
The solution is a 3CX in the cloud with a public IP, the extensions are on the local LAN with private IPs and a Firewall providing NAT/PAT. There will be nothing else, don't assume another piece of equipment is installed.
Assuming there are extension 101-121.
It's my understanding that the audio of a call between the outside world and an extension WILL go through the 3CX.
What path does the sudio take when the call is between ext101 and ext111, with recording off?
What path does the sudio take when the call is between ext101 and ext111, with recording on?
If this is configuration dependent please explain, but please do not say "If you have X additional equipment" because that is outside the scope of the solution.
Thanks