The "not ideal" part is that sysadmins will need physical access to the firewall and a Console/RS232 cable to begin the recovery process. Zyxel details each step in its advisory, but it involves ...