Stupid company!

I keep a machine which has sshd listening on the IMAPS port (993) for when I'm traveling. It's amazing how many free networks don't allow ssh, but with -J and sshd on port 993, that really doesn't matter.

A NGFW, frequently used in the enterprise environments will block it. They are checking the package signatures, not only the YCP ports.