prevent access to console

[Guest]

[Peter2]

Would it not be safer if the access to the console on the machine itself is blocked so nobody with insufficient privileges can reboot or restore factory defaults?

[mrkroket]

Someone with physical access to the Firewall can unplug it, so basically the reboot is the same.
About factory defaults maybe yes, but a decent IT Site should be enforced enough to avoid some people accesing the SITE, plug-in a monitor and a keyboard and execute the factory defaults.