Update: I've installed the system via SSH-based AutoYast and that method opens SSH port and accepts connections all the time. But it still doesn't restart the firewall and it doesn't solve the real issue - you need to restart FW to get it into expected state.