With monitored device setup you should be able to add the option to SSH/CLI into the device monitored. So the AteraAgent (that doing the monitoring) handles the connection to the device to ssh. For example port 80/443 unreachable but device locally is reachable. Can use the monitored device quick to get into troubleshoot.