How to block SSH reverse tunnel?

Hi,

how can I deny SSH reverse tunnel on my network (v5.4.1)?

On SSL/SSH Inspection Profile, enabling SSH Deep Scan for any ports and blocking SSH Shell commands?

I'd like permit only SSH on port 22.

Thanks