So you have a small remote office and want to permit SSH to the outside interface of the 871s. SDM does not seem to permit this. What you must is within the Zone Based Policy Firewall (at the CLI) to permit SSH is allow SSH from the outside zone to the self zone.