How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out via a rule or policy mis-configuration?

[tagged]
How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out via a rule or policy mis-configuration?

A.
fw delete all.all@localhost

B.
cpstop