To setup port forwarding you have to understand how to configure the firewall, yes. This is both a drawback for simple use cases but a boon for more advanced ones. It cuts both ways. Personally I think it’s rather unfair to call the UI unintelligible. If you don't like it just ssh to it and configure it that way. Everything you can do is packaged up in a nice command structure.