You can open only 8006 to gui and access everything in browser. It is not necessary to open noVNC ports. As for spice you need to configure the port in VM and then redirect it. If you don’t need ssh of individual machines then 8006 is sufficient if you want access ssh on VM then you need to map...