Hi,
I am not sure if the IP segments on your diagram are correct or not, but it appears that the layer-2 switch doing some routing right now, as you have a layer-3 segment on the VM side, a segment in the middle, and one on the PfSense Firewall.
Can you also post the output of "sh run" from the existing switch?
HTH