I just did a separate VLAN for my OOB devices and control the traffic through my pfsense firewall.