Hi!
ncat is a tool used for other purposes, it can tell you if a port is opened because it will connect successfully, but you can still try to use nmap. Take a look at these articles:

https://nmap.org/book/man-bypass-firewalls-ids.html
https://nmap.org/book/subvert-ids.html

Hope it helps!
Diego