Query regarding asset discovery in a network which has firewall

BigFix uses Nmap for asset discovery. There is a limitation on scanning a network using Nmap. If any firewall is present in the network, as it involves greater risk when we do a scan .
So how does BigFix Nmap handles the scan when the firewall is existed in the network .