It is buried deep in the settings. You cannot just click "Allow." You have to go into Settings -> Firewall -> Traffic Rules -> Configure and manually create a rule to allow System and svchost.exe for port 3389 (TCP). Alternatively, you have to switch the firewall from "Auto" to "Private" and manually move your network to "Trusted."
Finally figured it out: Norton blocks RDP by default (3/5 stars) norton security allow remote desktop connection
If you are searching for "norton security allow remote desktop connection," here is the reality check: It is buried deep in the settings