Hi,
You have to find the ports to open on the firewall:
If it's a PPTP tunnel, you have to open for example port 1763 (TCP),
If it's a IPSEC tunnel, you have to open port 500 and 4500...
Maybe you can enable on the Nortel Contivity Clients the "Nat Traversal", as with Cisco VPN clients...