I’ve no pfsense experience, but @ryan should be able to chime in at some point when he sees this.
Have you seen this article?