Original: Control over port forwarding with SSH (local, remote or dynamic port forwarding), including built-in handling of X11 forwarding.
Simplified: Public-key authentication support.