I checked mgmnt setting on sandbox, it is set to allow SSH, see pic:

hi Jamie, how did this end up for you? any issues? I have a similar requirement in a single tenant, with one main VRF inc many EPGs, that need to speak to each other, as well as a number of L3outs each in their own VRF. Concerned VZAny may not work p...