NCM Script to pull configs through a Firewall?

Does anyone have an example script or know a better way to pull configs from some switches through a Firewall?

I know we can do it with an expect script, but I'd like to be able to do this within NCM?

We have some switches that we can only get to by hopping through a Firewall first, no direct connectivity.

Thanks for any input!