Protect your hybrid AI setup

ClawFirewall is IWILL's specialised AI Firewall solution — a dedicated firewall optimised for networks with local and hybrid AI models (Ollama, OpenClaw, LM Studio) plus cloud APIs (Claude, GPT, Gemini). Unlike ordinary firewalls, ClawFirewall provides VLAN isolation of AI devices, egress filtering (allowing only specific cloud AI domains), AI API traffic monitoring and AI-powered deep packet inspection via Zenarmor.

Yes. The N1241 is fully compatible and tested with OPNsense. The Intel i226-V network chips are recognised natively by FreeBSD. Zenarmor (Sensei) installs as an OPNsense plugin and works without issues on the Intel N100 processor with AES-NI acceleration.

The fourth port is key for AI firewall scenarios. With 4 ports you get: Port 1 (WAN) — internet, Port 2 (LAN) — trusted network, Port 3 (AI-VLAN) — isolated zone for AI hosts, Port 4 (IoT/DMZ) — IoT devices or guest network. Without a fourth port you would need a managed switch for VLAN trunking.

Yes, via WireGuard VPN. The N1241 with OPNsense supports WireGuard natively. You can set up a VPN tunnel and access Ollama API or Open WebUI from anywhere — encrypted and protected by firewall rules.

With Zenarmor DPI active on the Intel N100, expect approximately 1-1.5 Gbps throughput. For most home and SMB AI setups this is more than sufficient. For higher throughput we recommend the N3281 with a Core Ultra processor.

Zenarmor offers a Home Edition that is free for home use (up to 300 devices). It includes Application Control, Web Filtering, Cloud Threat Intelligence and a Reporting Dashboard. For business use there are paid plans available.

In a typical home or SMB scenario, comfortably 5-15 AI hosts. The N1241 with 4x 2.5G LAN and Intel N100 is optimised for networks with moderate traffic volume. For larger AI clusters (15+ hosts) we recommend the N3281 with 8x 2.5G LAN.

Yes, and this is one of the key scenarios. In a hybrid AI setup (local models + cloud APIs), the firewall controls egress traffic — allowing only specific domains (api.openai.com, api.anthropic.com, generativelanguage.googleapis.com) and blocking everything else. This prevents data exfiltration and shadow AI endpoints.

2 years hardware warranty with local service in the UK. The software (OPNsense + Zenarmor) is open-source / free and maintained by the respective communities.