Protected Interfaces: what to add?

[flushell]

Running latest OpnSense with Sensei 1.6.2
On Free right now, but will surely switch to paid if this works well. Just beginning.

I have LAN (vtnet0), that is parent to 2 VLANS (vtnet0_vlan10 and vtnet0_vlan20)
I have a OpenVPN Server running (ovpns1) to connect to my home network when away.
Most my network traffic is ging out via a OpenVPN client (I use ProtonVPN): ovpns2
Some clients are going out via normal WAN (Netflix hates VPN).

Which clients to add in proctected interfaces?

I figured:

• LAN (vtnet0) -- Than my 2 VLANS are protected too.
• VPNServer (ovpns1)

Does this make sense?

Does it make sense to protect the ovpns2 interface? As it is a client, similar to WAN interface and WAN isn't proctected too (as advised per the manual).

[sy]

Hi Flushell,
To protect Ovpns2 doesn't make sense in your config. Please don't hesitate to contact us via the upper right corner of Sensei GUI for any case.

[flushell]

Thanks!