Depends on how determined the person using TOR is
Most of the successful blocking seems to revolve around port 9001, 9030 & 9090 AND examining 'unusual certificates' which is a bit more than the usual MX solution.
It is also possible to obtain the public Tor nodes, but it's a rather long list, constantly changing and a determined person will just use a private node.