Your coworker should look at his logs and filter it to the relevant subnets to see which packets are being dropped.
The first thing I would do though, is implement a
<IP handset subnet> to <MBG Server> on <any port UDP & TCP>
AND
<MBG Server> to <IP handset subnet> on <any port UDP & TCP>
I'd probably try MBG Server <--> ICP : any as well.
If the problem goes away, then I would know I need to fiddle with the firewall. If it doesn't, I would know I need to look somewhere else along the path.