To use the PIX cut-through proxy features, clients need to be authenticated via either Telnet, FTP or HTTP. In your case, clients need to setup a session using one of the listed protocols first (you could use the virtual telnet), after which they can start their SSH session.