How do I edit the configuration file to disable two-factor authentication for admin access?

Zyxel_Jeff

Question :

How do I edit the configuration file to disable two-factor authentication for admin access on USG Flex/ATP firewalls?

Answer :

If you have already enabled 2FA authentication for the admin account and would like to bypass it during the recovery procedure, please disable 2FA authentication by removing "two-factor-auth admin-access activate"(as shown below) from the backup configuration file before applying it. This ensures that you can log in to the firewall normally and bypass the 2FA authentication process.

Once you have successfully removed "two-factor-auth admin-access activate", the configuration will appear as follows:

This action is the same as navigating to Object > Auth. Method > Two-factor Authentication > Admin Access > General Settings and disabling the Enable option from the Web-GUI.