Pfsense + XG firewall

Question

Hi All, 
 
 I've recently installed a Sophos XG firewall on a dedicated appliance, in bridge mode, with a pfsense as gateway. 
 
 modem --> pfsense --> xg firewall 
 
 The main reason I'm keeping pfsense as main gateway it's because the vpn capability! 
 The only downside of this setup is that I've lost any vlan feature because the limitations of the bridge mode. 
 I'm wondering if I can try a different setup, but not sure this would work, so before to destroy my network I would really appreciate the community input. 
 What I'd like to try is: 
 
 modem --> xg firewall (gateway mode) --> pfsense 
 What I want to achieve is to use pfsense as vpn client/gateway only for selected clients/subnets. Is it possible? Maybe playing with static routes? 
 
 Many thanks in advance for any advice

lferrara · Accepted Answer

Infinityz, 
 thankf for bigger images. So in the "will be" configuration, XG will be used as router while the Pfsense will be used only as VPN Concentrator. This should be fine. On XG you only need to DNAT all the ports used for your VPN. For the routing, on Pfsense configure XG as default gateway and you shoul be ok if pfsense and Wi-FI are in the same subnet. 
 https://community.sophos.com/kb/en-us/125446 
 This is the link to configure VPN L2TP. 
 If those are your requirements, I would leave only XG and Wi-FI AP for semplicity.