Access to the SBC (EMS) is required to run the scan. The access can be direct network access (the scanner is in the same WAN network as the SBC), via VPN or via SAL.
We have an asset-light approach to the scan and do not use an agent approach that requires you to install a software component on any machine in your network. The scanner utility collects data from your SBC, strips out personal and sensitive data ...
The product does not change the working of an SBC, nor does it sit in the middle of the call path. So, it does not affect the working of the SBC in any way. Therefore, it is not required to get this certified by SBC OEMs.