Hello,
If the port 22 must be opened for both vsm server and vsm agents which is the purpose of the vsm servers in that case? I am thinking that vsm server acts as a sort of reverse proxy to secure external connections.
vsmserver enables a system administrator to run multiple ThinLinc agents in a cluster, and in that case, acts as a source of truth of which agent has which session.
Because if i have severals vsm agents i would need a different external ports (on wan side) for every vsm agent, or maybe different external ips.
You would need different public ipaddress on your firewall, and forward port 22 on each IP to a corresponding local IP port 22, on your inside zone.
In cases where this is not possible (i.e you only have one public facing IP), there is a HOST_ALIASES client setting, used together with an SSH tunnel from the client to the inside LAN can work around this.
@VirusABC wrote a blog about this here
Regards,
Martin