Nope, the tool only scans the subnet you're on. I wish you could specify, but it won't. It even says in the manual you must be on the same subnet. That's why I don't get that they don't set it with DHCP. If they want people to use the tool, then DHCP wouldn't impact setup as the unit could grab an address and the tool would find it. They set it as static with the intent that they can tell you what IP to enter instead of using the tool.
But with my network, I have multiple subnets with different routers all behind the firewall. The 192.168.1.0/24 is the main network, but it is not the POE network. My POE network is on a different switch, behind a different router which is intern on a separate port on my firewall. That's done so that if the camera network is compromised a hacker couldn't get to my main network. So while I can hit the POE network, the tool can't and I can't change the IP to allow it to be accessed and without a means to set the camera to DHCP without accessing it, it makes it hard to initially configure. So I have to keep a POE injector around to access it, be nice if it could just be reset and pickup an address from my subnet.