Did you know that, by default, the TMG firewall requires that the outbound SSL port for web proxy clients to be TCP 443?
If you try to get to a site that uses an alternate port, the connection will fail.
However, you can this by following the instructions in this blog post.
DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)