The following features need to be configured through CLI:
-PPTP (But only if you want to enable local authentication, Radius can configure via GUI)
-Firewall Zones and Policies
-EBGP
-IBGP
-Open VPN
-L2TP
-IPSEC Etc.
Of course I also made performance tests (JPerf) on 2 NICS 2 subnets without a firewall can be the complete Gbit bandwidth exploit, really impressive, such performance I know otherwise only of more expensive devices (Cisco, HP, etc.)
Basically, to say it's really a great device but not for the layman.