set service ssh
set firewall global-options state-policy established action accept

vyos@vyos14:~$ netstat | grep ssh
tcp        0     36 192.168.188.122:ssh     192.168.188.80:51786    ESTABLISHED
vyos@vyos14:~$ sudo conntrack -L
conntrack v1.4.7 (conntrack-tools): 0 flow entries have been shown.

sudo nft list table ip vyos_conntrack
....
        chain PREROUTING { # handle 3
                type filter hook prerouting priority raw; policy accept;
                counter packets 46 bytes 7441 jump VYOS_CT_IGNORE # handle 21
                counter packets 46 bytes 7441 jump VYOS_CT_TIMEOUT # handle 22
                counter packets 46 bytes 7441 jump FW_CONNTRACK # handle 23
                counter packets 46 bytes 7441 jump NAT_CONNTRACK # handle 24
                counter packets 46 bytes 7441 jump WLB_CONNTRACK # handle 25
                notrack # handle 26
        }

        chain OUTPUT { # handle 4
                type filter hook output priority raw; policy accept;
                counter packets 24 bytes 1692 jump VYOS_CT_IGNORE # handle 27
                counter packets 24 bytes 1692 jump VYOS_CT_TIMEOUT # handle 28
                counter packets 24 bytes 1692 jump FW_CONNTRACK # handle 29
                counter packets 24 bytes 1692 jump NAT_CONNTRACK # handle 30
                notrack # handle 31
        }

        chain VYOS_CT_HELPER { # handle 5
                ct helper set "ftp_tcp" tcp dport 21 return # handle 32
                ct helper set "ras_udp" udp dport 1719 return # handle 33
                ct helper set "q931_tcp" tcp dport 1720 return # handle 34
                ct helper set "rpc_tcp" tcp dport 111 return # handle 35
                ct helper set "rpc_udp" udp dport 111 return # handle 36
                ct helper set "pptp_tcp" tcp dport 1723 return # handle 37
                ct helper set "sip_tcp" tcp dport { 5060, 5061 } return # handle 39
                ct helper set "sip_udp" udp dport { 5060, 5061 } return # handle 41
                ct helper set "tns_tcp" tcp dport { 1521, 1525, 1536 } return # handle 43
                ct helper set "tftp_udp" udp dport 69 return # handle 44
                return # handle 45
        }

vyos@epa2:~$ sudo nft delete rule ip vyos_conntrack PREROUTING handle 26
vyos@epa2:~$ sudo nft delete rule ip vyos_conntrack OUTPUT handle 31
vyos@epa2:~$ sudo conntrack -L | grep tcp
conntrack v1.4.7 (conntrack-tools): tcp      6 431964 ESTABLISHED src=192.168.77.32 dst=192.168.0.182 sport=60224 dport=22 src=192.168.0.182 dst=192.168.77.32 sport=22 dport=60224 [ASSURED] mark=0 use=1
9 flow entries have been shown.
vyos@epa2:~$