I understand that (almost?) everything should be configured and deployed
via FortiManager for any devices that are managed. Are there any
configuration elements that cannot be done through FortiManager and must
be done independently at the device lev...