Hi
Just want to make it clear - there is no way the deployment agent (DA) can block SSH.
Even if it's down or crashing or whatever other problem that might happen - the DA can't cause ssh connections to be blocked.
The issue you are facing is not sure to the DA update but maybe some other updates happened during the same time.
Will appreciate if you run "da_cli collect_logs" on the machine and send me the resulted tgz (boazo@checkpoint.com) just to check if other things happened approximately on the same time.