How do I set up OpenVPN to Passthrough from OpenVPN Client (through Netgate box) unencrypted to an external site

[munson]

How do I set up Negate 5100 to Passthrough from an OpenVPN Client (encrypted to the Netgate box with an OPenVPN server) unencrypted traffic to an external site? I can connect from OpenVPN Client to Netgate and access its services. I want then to go out to for, example, an external web site.

[viragomann]

@munson
What do you mean by "unencrypted traffic"?
It's on the web browser to request traffic unencrypted (http) or encrypted (https). pfSense has no impact on this as long as you don't run a proxy.

Generally to force all upstream traffic from the client over the VPN, check "Redirect IPvX Gateway" in the server settings.

Then ensure, that there is an outbound NAT rule in place for the OpenVPN tunnel network.
If not switch the outbound NAT into hybrid mode and enter a rule for the source of the tunnel network to WAN.