Because "Compliance" Software Blade is a Management blade, you cannot activate it in a VSX Gateway / VSX Cluster object. By design, the "Security Best Practices" for "Gaia OS" are not checked on VSX Gateways / VSX Clusters. Refer to sk92861 - ATRG: Compliance Blade.
In this version, Gaia Portal is supported only to install CPUSE packages.
Dedicated Management Interface (DMI) management is not supported through a physical interface (on the VSX Gateway / VSX Cluster Member) that has one or more VLAN interfaces configured.
NAT is not supported between the Management Server and the managed VSX Gateway / VSX Cluster. It is not supported to manage a VSX Gateway / VSX Cluster in these cases:
When the Management Server is behind NAT
When the VSX Gateway / VSX Cluster is behind NAT
It is not supported to manage a VSX Gateway / VSX Cluster when the management traffic passes through a Virtual System on the same VSX Gateway / VSX Cluster. Only VS0 can communicate directly with the Management Server.