That ":88" at the end of the hostname means "tcp port 88"
(usually used by kerberos). Not surprising if organizational
firewalls filter it. Their rule is usually "if it is not a destination
port for a well-known service that we know we need to allow
through the firewall, filter it."
If you are at work, and they generally let out port 80 or 8080
www connects, you can get there via an anonymous web
proxy:
http://proxy.org/
Your web browser will connect to the proxy on port 80,
the standard http port, and the proxy will connect to the
TOMATObase on whatever port the dns redirect specifies
(tcp port 88 in this case).
edit:
I do not know if the www proxies pass everything. They
commonly filter ads, embedded scripts, etc. If you need
to order something or log in somewhere, be sure to check
to make sure that the lock icon in the address bar on your
browser is showing that indicates an encrypted ssl connection.