This metric checks a Cisco ASA configuration for SSH traffic that is allowed globally on an outside interface.

Management.SSH.Channels[?Source=='0.0.0.0' && (Service=='Outside' || Service=='OUTSIDE' || Service=='outside')] | length(@)