I don't know what firewall/proxy they are using in their network, but at a minimum you need to allow outbound UDP to 3478 and 1473 on our anycast IPs