pfsense specific networking tutorial.

I have a home lab setup which I require some networking related setup for. My lack of networking experience is making it hard but I believe the task should be relatively straightforward. My network setup is as follows: I have a standard ISP router which connects me to the internet. I have my home devices plugged into here. Also plugged into this is an ESXi sever running pfsense. The pfsense contains 2 networks: WAN - plugged into the ISP router LAN - plugged into the virtual network The WAN configuration contains NAT rules which only allows traffic to reach the internet if it is encrypted (PIA VPN). I want this to remain, but I would like to bypass some very specific ports and services such as Plex. I have the VPN and NAT set up, but I can't figure out the rest of it. I would like a tutorial creating on how to do this. My ESXi server does contain a second physical LAN, which could be used if required.