For an outgoing authentication request, you shouldn't need to open any ports on your system. If he needs 443, then he needs 443 outgoing.

Is there a list of NeoQB server IPs around that people could try and ping or telnet at 443 to see if there are connection issues on their ISP?