VNC client on 10.80.100.x/24 connects to ESX built in VNC server on 10.80.100.x port 5901 -- works great

Now place the VNC Client on another subnet 10.80.160.x and it fails.  Network is not blocking, I can ssh, ping etc. between the client and esx just fine.

Not sure how to navigate the vmware firewall...  is there something in the vmware firewall that would allow connections from the subnet where the ESX server resides (local subnet) but not from another network?

Thanks!!