Managing the ESXi SSH Server Firewall Exception Across Hosts with PowerCLI
VMware PowerCLI can manage the firewall exceptions on ESXi hosts through vCenter Server. The commands in this guide change the SSH Server firewall exception on ESXi; they do not configure the firewall of the vCenter Server Appliance (VCSA). Enabling this exception permits inbound SSH traffic through an ESXi host’s firewall. It does not start the SSH service. Opening SSH on many hosts also increases the management-plane attack surface, so target only the hosts that require access and disable the exception as soon as the work is complete. ...