When I first looked at pfsense I had exactly this thought … however I didn’t get far with it … ultimately I bought a second identical box for pfsense as my backup, I use it for testing but the pfsense restore process is pretty easy so I’m relying on this. It seems quite challenging to get pfsense to operate in a vm depending on the scenario.