On Cisco equipment you can revert back to a working configuration (by not saving the configuration ) and just have a user at the site reboot the piece of networking gear) in case you ***** up remote connectivity to the device. I would like a way to revert back to a working configuration when dealing with external interfaces or other areas on the sophos where you can create a situation where you can lose access to it. Not everyone has someone technical on site to cable up to the sophos if you cut off access to it mistakenly . The best a normal end user can do is cycle the power on device.