SSH access to AP, even when the AP is behind NAT network is possible through Pronto Cloud Controller.