TMG and Azure

We have installed a TMG in our office. We want developers machines can open remote desktops in Azure (3389) and also have access to SQL Server (1433).

From an external internet I have found that I can connect to these services, therefore I understand that they are rules I configure network but not exactly where.

thanks