I know the system automatically backs up the config before applying firmware. I wish Sophos would add a hotkey or a console command that would be advertised after logging in that would list out all the backups on disk and let you pick to restore. If this was available there would be a way out the issue of what to do if the WebAdmin GUI isn't available. I recently had an issue during a firmware update where High Availablity messed causing the NICs to all be disabled (I believe both systems may have thought they were the Slave). Locky for me I had done a manual backup to a different location but having this option to restore from the console would have been a major time saver and could really help someone who forgot to do a manual configuration backup. I had to download the latest version, create the media, and run the installation to get to the restore prompt. Plus with the High Avavility option I had to install the 2nd node, skipping the restore, and then enable the High Availability feature on the 1st node and then the 2nd node to get working again. It would be good if there was an option to restore the node running in Slave mode. I believe the only way to get the Slave node working again is to reinstall and redo the High Availablity options on both nodes. However, I could be wrong.