Hi David,
i think it’s a good idea to read this topic: Configuring SpeedFusion behind a firewall
This way you know the ports involved to create a speeedfusion tunnel. You can try to telnet your HQ on 32015 to check if this connection works. You can force a tunnel setup on different ports. They may block udp4500 because this is the standard for ipsec tunnels. If udp4500 is already in use the next higher port will be used.