Allow my vulnerability scanner through gateway

[bign]

Hi mates,

I've had a lot of trouble allowing a vulnerability scanner to scan my environment. Even after I allow the scanner in through firewall access control, IPS exception, General Inspection settings exception, and Application Control policy, I still some of the scanner's activity blocked. (Running R80.20 on all gateways)

Does anyone have a good way to allow, even temporarily, a scanner to have its way with an asset on the other side of the gateway?

Thanks very much everyone,

Aaron