Lync 2010 and Reverse Proxy

Hi,

i am really pulling my hair out here and could do with some help! I am completely new to Lync and OCS and have been trying to pick it up as i go along

i have recently deployed Lync 2010 into our organisation (my first time doing this) and all works apart from Online meetings and mobile access externally,

i have the following setup

Lync Standard --- > Lync Edge
          |
          V
   TMG Server

i dont think i have my topology set up right, should i have rules from my firewall pointing at my edge and not my TMG?

as it stands i have no firwall rules pointing at my TMG just my edge...

urls are as follows,

sip.domain.com - xxx.xxx.xxx.230
meet.domain.com/meet - xxx.xxx.xxx.230
dialing..domain.com/dialin - xxx.xxx.xxx.230

i have a SAN cert installed.

i used the www.testocsconnectivity.com website and it all said ok, apart from the Mobile access test which said there was a problem with the reverse proxy. the message is as follows::

If you are using a Reverse Proxy to get to the Access Edge Server, this could possibly be an issue with Reverse Proxy configuration.: Exception Details: Message: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. Type: System.IO.IOException Stack Trace: at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size) at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult) at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost) at TestOCSConnectivity.Tests.SSLCertificateTest.PerformTestReally() Exception Details: Message: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. Type: System.IO.IOException Stack Trace: at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size) at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count) at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest) at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult) at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost) at TestOCSConnectivity.Tests.SSLCertificateTest.PerformTestReally()

any help would be very much appreciated