Use the firewall log to see what exactly of the RDP is blocked and set a rule for it.