I have NCM working fine with all manner of Cisco SF/SG switches, but I recently added two SG350-28P switches to the network and NCM cannot seem to back them up via SSH. Enabling session tracing indicates that the devices are timing out when logging in. I can successfully use SecureCRT from the Orion server to log into these devices. The issue seems related to SSH and is not a password or network connectivity problem. If I change the login method to use Telnet, it works fine, which leads me to believe the issue is not related to the NCM template, which was just copied from an existing working template and the system OID changed.
The following is a wireshark capture of the attempted SSH session by NCM. After TCP establishes, NCM never starts the key exchange and after about 45 seconds, it times out and restarts the connection, which it does two more times per the NCM settings.

Again, this only happens on this one model of SG350. I have an SG350-10MPP which works fine and as I said, a connection profile that uses telnet as the transfer protocol also works. Bug? Obscure setting I'm missing?