It looks like they are doing a port switching in transit from 443 to 63658 most proxies and firewalls will kill this connection. Make sure the *.cryptlex.com is also allowed on port 63658 as well. You could probably get away with api.cryptlex.com as long as your proxy allows port connects on 63658 which by default they would not.