esx/vsphere firewall blocking off-net VNC connections?

[jacksonp2008]

VNC client on 10.80.100.x/24 connects to ESX built in VNC server on 10.80.100.x port 5901 -- works great

Now place the VNC Client on another subnet 10.80.160.x and it fails.  Network is not blocking, I can ssh, ping etc. between the client and esx just fine.

Not sure how to navigate the vmware firewall...  is there something in the vmware firewall that would allow connections from the subnet where the ESX server resides (local subnet) but not from another network?

Thanks!!

[mhampto]

The ESXi host should not block the communication, by default it leaves the communication ports open and does not discriminate subnets. Does telnet connect on port 5901? It still seems like something in the network is blocking the connection.