Behind FW perimeter PFsense how VPN IPsec HUB

[Zas]

Hi,
I want to use a pfsense firewall as vpn ipsec hub for four clients. PFsense will be behind a perimeter firewall. I only have in the WAN of the FW Perimetral a public IP. From the FW I will enable Port Forward 500,4500 and ESP to PFsense. It will work? What best practices do you advise me?

Thanks and regards