Cannot connect to Photon Server

Options
Hello,
I'm develop game with unity and photon server (host on amazon) for Facebook.

Because game published on FB need use https connection, if i correct understand we can change port for this?
<!-- WebSocket (and Flash-Fallback) compatible listener -->
		<WebSocketListeners>
			<WebSocketListener
				IPAddress="0.0.0.0"
				Port="9090"
				DisableNagle="true"
				InactivityTimeout="10000"
				OverrideApplication="ECL">
			</WebSocketListener>
			<WebSocketListener
				IPAddress="0.0.0.0"
				Port="8080"
				DisableNagle="true"
				InactivityTimeout="10000"
				Secure = "true"
        			StoreName = "My"
       	 			CertificateName = "fbcanvas.elitechessleague.com"
        			UseMachineStore = "true"
				OverrideApplication="ECL">
			</WebSocketListener>
		</WebSocketListeners>
During testing one client cannot connection to game with his work place, but at home all works fine.

He always testing game (from FB include) on work and they work fine.

What can block photon work?

All server config here:
<!-- Instance settings -->
	<ECL
		MaxMessageSize="512000"
		MaxQueuedDataPerPeer="512000"
		PerPeerMaxReliableDataInTransit="51200"
		PerPeerTransmitRateLimitKBSec="256"
		PerPeerTransmitRatePeriodMilliseconds="200"
		MinimumTimeout="5000"
		MaximumTimeout="30000"
		DisplayName="ECL"
		>
		
		<!-- 0.0.0.0 opens listeners on all available IPs. Machines with multiple IPs should define the correct one here. -->
		<!-- Port 5055 is Photon's default for UDP connections. -->
		<UDPListeners>
			<UDPListener
				IPAddress="0.0.0.0"
				Port="5055"
				OverrideApplication="ECL">
			</UDPListener>
		</UDPListeners>
    
		<!-- 0.0.0.0 opens listeners on all available IPs. Machines with multiple IPs should define the correct one here. -->
		<!-- Port 4530 is Photon's default for TCP connecttions. -->
		<!-- A Policy application is defined in case that policy requests are sent to this listener (known bug of some some flash clients) --> 
		<TCPListeners>
			<TCPListener
				IPAddress="0.0.0.0"
				Port="4530"
				InactivityTimeout="0"				
				>
			</TCPListener>
		</TCPListeners>

		<!-- Policy request listener for Unity and Flash (port 843) and Silverlight (port 943)  -->
		<PolicyFileListeners>
		  <!-- multiple Listeners allowed for different ports -->
		  <PolicyFileListener
			IPAddress="0.0.0.0"
			Port="843"
			PolicyFile="Policy\assets\socket-policy.xml"
			InactivityTimeout="10000">
		  </PolicyFileListener>
		  <PolicyFileListener
			IPAddress="0.0.0.0"
			Port="943"
			PolicyFile="Policy\assets\socket-policy-silverlight.xml"
			InactivityTimeout="10000">
		  </PolicyFileListener>
		</PolicyFileListeners>

		<!-- WebSocket (and Flash-Fallback) compatible listener -->
		<WebSocketListeners>
			<WebSocketListener
				IPAddress="0.0.0.0"
				Port="9090"
				DisableNagle="true"
				InactivityTimeout="10000"
				OverrideApplication="ECL">
			</WebSocketListener>
			<WebSocketListener
				IPAddress="0.0.0.0"
				Port="8080"
				DisableNagle="true"
				InactivityTimeout="10000"
				Secure = "true"
        			StoreName = "My"
       	 			CertificateName = "fbcanvas.elitechessleague.com"
        			UseMachineStore = "true"
				OverrideApplication="ECL">
			</WebSocketListener>
		</WebSocketListeners>

		<!-- Defines the Photon Runtime Assembly to use. -->
		<Runtime
			Assembly="PhotonHostRuntime, Culture=neutral"
			Type="PhotonHostRuntime.PhotonDomainManager"
			UnhandledExceptionPolicy="Ignore">
		</Runtime>
				

		<!-- Defines which applications are loaded on start and which of them is used by default. Make sure the default application is defined. -->
		<!-- Application-folders must be located in the same folder as the bin_win32 folders. The BaseDirectory must include a "bin" folder. -->
		<Applications Default="ECL">
		
			<!-- ECL Application -->
			<Application
				Name="ECL"
				BaseDirectory="ECL"
				Assembly="ECL.Net.Server"
				Type="ECL.Net.Server.ChessApp"
				ForceAutoRestart="true"
				WatchFiles="dll;config"
				ExcludeFiles="log4net.config">
			</Application>

		</Applications>
	</ECL>