A handy thread for setting up routers:
http://www.blackberryforums.com/wifi...ports-qos.html
The key official Blackberry tech article says TCP/IP Ports 443, 500, 4101, and 4500 to cover UMA, BIS, and BES.
View Document
I just spent a bit of time looking for this, and figured I might save some of y'all some effort by adding to this sticky thread.