But, I think you asked the right question "Is this (vm@10.220.11.222) reachable from 10.206.36.161 over 443?" .. does it mean that we need to open port 443 on our ESX Firewall ?
Not sure what "our ESX firewall" means here, but you need to determine if there is a firewall on these network paths and open these ports if so:
10.206.36.161 --> 10.220.11.222:443
10.220.11.222 --> 10.206.11.50:22
Is this helper VM only reachable thru this port? This can explain why we can't ping this vm ?The HelperVM will respond to ICMP echo requests (pings) and also to requests on port 443, so it should be pingable if there is not a firewall denying ICMP echo requests, and if your routing and switching are all setup correctly per the connections I mentioned above.
Maybe you missed my earlier response: "Please try to determine where in your network the packets are being dropped. Maybe traceroute will help with that."
This problem is really outside of our control, if you are the network administrator then you should be able to do what I just requested. If you are not then you should forward this request to your network administrator and work with them to debug this.
UPDATE: finally, you really should post your logs so we can be sure about what you are experiencing (or send them via email to us -- private mail me on the forums and I'll send you an email address).
(If your question has been resolved please mark the answers as "Helpful" or "Correct".)