downstream host scanning

To scan a host downstream from a security gateway, Firewalking: