So, we have a direct connection to the internet - no firewalls in play other than the built in one in VitalPBX. I have whitelisted the addresses from here: VitalPBX Connect Provisioning/Push Server List
When the app is closed, we only see the one registration - which appears to be the push servers. With the app open, we see both.