You probably have any internal systems. At the moment they are likely routed to the pfSense and has to be later switched to the MX.
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.