If you're hosting LimeLM on your own servers then TurboActivate only contacts your servers. If you're using our hosted version of LimeLM then TurboActivate contacts our servers (through wyday.com/...).
If the customer's location is completely locked down (no outbound/inbound) then the customer can always use offline activation.