[netbmed]

So the internal network has perhaps 12 firewalls. What I'd like to know is whether there are any of these firewalls would block traffic from a particular device (a security scanner) to any section of the network. It there any way to do such a macro operation?

[Jia.Xing]

This is dependent on the complexity of the Access List/Policy.
1. If the Access List/Policy is able to be searched, in the bar on the top, you can search for the Access List/Policy using the security sanner's IP as criteria. Any Access List/Policy in all firewalls' configs that meet the criteria will be listed in the result.

2. If the Access List/Policy is too complex to be searched, you can run path calculation to check. Given the fact that you have a large scale of network, you can batch add path calculation tasks in the "Path" pane on the left. You can use "Export" to export a CSV file of the path calculation tasks, modify the CSV file to include all your target subnets and then import back.