SCP Access should be possible
According to the following thread, SCP-Access to the Firewall should be possible. It would improve troubleshooting workflows a lot.
Using scp is generally possible both to and from the Firewall.
Running SCP remotely to/from the firewall, some directories are not available for security reasons – for example, /log cannot be directly accessed because of file permissions. However, if you need to copy logs from the device, you can either copy them to /tmp first of all, or login to the device and run scp locally.
Running SCP locally has been fixed so that you no longer have to specify the path to the ssh command in the scp command line.
Hannes Canisius commented
You can now use PSCP, do download the logfiles, which is a huge advantage.