How do I allow Blackberry BIS access through HTTPS on my Fortinet Firewall

Hi,
I have a FortiWIFI 50 and have closed down inbound HTTPS. We have 15 users on Blackberry's using BIS.
I user's BIS keeps falling down, either he needs to keep resetting password, or won't get his mails.
I have opened up the firewall for the ports (I think) based on the following link.
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB11036&sliceId=SAL_Public&dialogID=63832630&stateId=1%200%2063826436

I started off with a nice tidy rule, but it has got bigger and bigger due to me trying to get this working, along with my limited networking skill :)

Currently it only works for everybody when I open HTTPS for ALL, otherwise this user and 1 other have problems.

Currently the unworking rule in my firewall policy has the following
Source - BLACKBERRY GROUP (which is all the IP from the blackberry link)
Destination - HTTPS
Service - HTTPS, SNMP

Any ideas? I am pulling out my hair, it the user with problems happens to be the Managing Director.