Given the very little info you have given (Windows Server version, multi- or single-homed, etc.), it is impossible to help you properly. That said, why have you opened those ports and why are you considering opening more? The only port that should be forwarded to your Remote Access server is TCP 443.
You don't need UDP 3544 for DA, and you *MUST NOT* open TCP 62000 - apart from the security ramifications of this, off-site clients must not be able to see the NLS, as it will make them think they are on the local network when they're not. This is the one and only purpose of the NLS - it's a LAN-internal website whose accessibility allows a client to determine whether it is on the LAN or not.
Close the ports in your 2860 that shouldn't be open, then go back to your server and open the Remote Access Management Console dashboard and make sure you have all greens in the Operational Status. Then test again. There are lots of DA troubleshooting tips and tools around, but this forum is not the place to address them.
