After our Oracle database 12.2 has been created on Windows server, we should open port 1521 on firewall for incoming connections. For Linux, you can refer to : How to Open Ports and Survives from Reboots
First of all, we open Windows Defender Firewall directly, the graphic interface would look like this:

Windows Firewall - Inbound Rules - New an inbound rule
In "Inbound Rules", we add a new rule.

Windows Firewall - New Inbound Rule Wizard - Select "Port" to Open
Please input the port number 1521 for TCP protocol.

Windows Firewall - New Inbound Rule Wizard - Input Port Number "1521"
Since this is a white rule, please allow incoming connection.

Windows Firewall - New Inbound Rule Wizard - Allow All Connections
Apply all sources of connections.

Windows Firewall - New Inbound Rule Wizard - Profile
Name the inbound rule.

Windows Firewall - New Inbound Rule Wizard - Name
The rule takes effect immediately.

Inbound Rules - New Rule is Online
Now the listener is accessible externally. Optionally, if you would like to connect enterprise manager express 12c from outside other than localhost, you should open port 5500 too. The access URL is:
At times, an inconsistent states between Windows Service and SQLPlus that you might have been aware of. I'll talk about it in the post: How to Resolve "Connected to an idle instance" on Windows.