How do I set up port forwarding on a Watchguard Firebox X 700?

I’m trying to set up VNC for a couple of my colleagues, but don’t want to leave port 5900 open on the firewall for port scanners.