Unpopular opinion:
Ditch pfSense and migrate to OPNsense.
Not only that it is way more community friendly, but it has much better UI and security.
HardenedBSD vs vanilla old FreeBSD, as well as many things that Netgate, the current owner of Pfsense,
doesn't like to implement. Just check the forums of both projects and see who is on top in 2019.
As a person who spoke negatively about it before, I now take my words back and welcome you to try it.
Also, as a way of philosophy, when a company makes a "community edition" of what used to be FOSS, run.
PF is probably fine but their focus now is business customers, which is apparent. At least Deciso (the forked)
company is making profits on hardware and software support, not software as-is like with Netgate and pfSense.
Maybe a complete guide will soon to come how to migrate or start from scratch.