Can tailscale work when firewalls block outgoing udp from everywhere except the company web proxy server ?

I think I actually have that in production somewhere, going through DERP always

Tailscale can work anywhere you can get an https connection... but it might not be fast, since the relays used for this have various limits.