Norton Secure VPN and Router OS

[d412s]

From the outside they are closed. That is how a statefull firewall works you can only open a window in the firewall from the inside.

Check if port 500 and 4500 UDP (ipsec) are allowed to open such a window.

And how properly I have to open them?
I have tried steps from here http://forum.mikrotik.com/t/open-firewall-port/75304/1
But when I again was trying to check ports - see 0 in counters and services returns me ‘port is closed’