A way to detect clients that are NOT Managed by SEP WITHIN the Subnet

Is there any way to scan the subnet from within the CONFINES of the Subnet?
Example

Let's say I have a

192.168.10.x Subnet Which is in NYC and my SEPM is in NYC

But I have a 192.168.17.x in Miami

Is there any way to go to the .17 subnet and scan for that Subnet from this subnet?

Scanning from NYC to Miami across Subnets will take a long time, and it consumes bandwidth.

Like I can use client remote.exe to push a package from the site that the subnet is on. I'd like this functionality for scanning abilities as well.

I believe there should be a utility like this in order to scan subnets from WITHIN the Subnet itself. It would be a lot faster than scanning across subnets.

Thank you