if you can not install netclient to pfsense, you can install it to whaterver NM supported OS box behind pfsense. And then set-up static route on pfsense.