Actually, yes, packet inspecting firewalls do. Hence the SSH over TLS, to make things stealthy.