vi /etc/vmware/firewall/service.xml

<!-- Firewall configuration information for VNC -->
<service id='0040'>
<id>VNC</id>
<rule id='0000'>
<direction>inbound</direction>
<protocol>tcp</protocol>
<porttype>dst</porttype>
<port>
<begin>40000</begin>
<end>60000</end>
</port>
</rule>
<enabled>true</enabled>
<required>false</required>
</service>

esxcli network firewall refresh

esxcli network firewall ruleset list | grep VNC
VNC true