A systems administrator needs to remotely manage a Linux server over the network using an encrypted command-line session. Which protocol and port should be allowed through the firewall to support this securely?