Remote access and security

Hi, Illen need remote access to a box behind a firewall. Security is a
requirement.

On a scale of 1 to 10 with 1 being totally insecure and 10 being totally
secure, how would you rate the following

1. Using VNC from a computer anywhere on the internet connecting to a
computer sitting behind a firewall. The firewall passes traffic on port
5900 to a specific computer on the LAN.

2. The same basic setup as above, except using ssh to forward port 5900
to the specific machine behind the firewall.

Any other ideas would be greatly appreciated.

Charlie Bu