I also do this quite often. Network security admins allow only a port 22 binary connection to an inner enclave of protected machines, protected by firewall. I

I also do this quite often. Network security admins allow only a port 22 binary connection to an inner enclave of protected machines, protected by firewall. I need to admin those machines, sometimes with gui apps. ssh -X to the rescue.