Firewall / VPN Solution

Your network security — without subscriptions

Professional firewall and VPN for home and small office based on the IWILL Nano-N1121 with pfSense or OPNsense. No monthly fees, no licences.

3x 2.5G LANAES-NIFanlessTPM 2.0<15W
IWILL Nano-N1121 fanless firewall mini computer with 3x 2.5G Intel LAN
The Problem

Why do you need your own firewall?

🔓

Home router is NOT enough

Standard ISP routers lack IDS/IPS, VPN server or VLAN segmentation.

💸

Expensive subscriptions

Fortinet, Sophos and Meraki require annual licences costing hundreds of pounds.

🏠

Working from home

You need a secure VPN tunnel to the office without paying for an enterprise solution.

📡

IoT vulnerabilities

Cameras, thermostats and smart devices are easy targets without network isolation.

The Solution?

IWILL N1121 + pfSense/OPNsense = professional network security at the price of an ordinary router. No subscriptions. No vendor lock-in. Full control.

Hardware

IWILL Nano-N1121

Compact, silent, built for 24/7 operation. Everything you need for a home or office firewall.

3x
2.5G Intel LAN

WAN + LAN + OPT/DMZ

AES-NI
Hardware encryption

Accelerated VPN throughput

0 dB
Fanless

Aluminium enclosure, <15W

185mm
Compact

185 x 137 x 44 mm, 0.84 kg

ProcessorIntel Celeron J6412 (4 cores, 2.0-2.6 GHz, Elkhart Lake)
Memory1x DDR4 3200MHz SODIMM, up to 32GB
Network3x Intel i226-V 2.5GbE LAN
Display1x HDMI + 2x DisplayPort (triple 4K)
Storage1x M.2 2280 + 1x 2.5" HDD/SSD
Expansion3x M.2 (WiFi + 4G/5G simultaneously)
USB6x USB (3x USB 3.1 + 3x USB 2.0)
Power SupplyDC 12V, 5A adapter (included)
Dimensions185 x 137 x 44 mm | 0.84 kg
SecurityTPM 2.0, Watchdog, Wake-on-LAN, PXE Boot
CertificationsCE, CCC, FCC Class A, RoHS

Why are 3x Intel i226-V 2.5G LAN important?

Port 1 (WAN)

Connects to ISP modem/router

Port 2 (LAN)

Connects to internal network

Port 3 (OPT)

DMZ, guest network, failover WAN or VLAN trunk

Software

Choose your software

pfSense and OPNsense are the two leading open-source firewall systems. Both are fully compatible and tested with the N1121.

Feature
pfSense
OPNsense
Based on
FreeBSD
HardenedBSD (FreeBSD fork)
Web interface
Classic, tried and tested
Modern, more intuitive
VPN support
OpenVPN, IPsec, WireGuard (package)
OpenVPN, IPsec, WireGuard (built-in)
IDS/IPS
Snort / Suricata (package)
Suricata (built-in)
Ad Blocking
pfBlockerNG (package)
Adguard Home (plugin)
Updates
Less frequent, stable
Frequent, weekly
Licence
Apache 2.0 (CE)
2-Clause BSD
Community
Large, mature ecosystem
Growing, modern
N1121 compatibility
Fully compatible
Fully compatible

Both options work perfectly on the N1121. We can supply the device with pre-installed software of your choice.

Scenarios

Where does the N1121 fit?

Click on each card to see the network diagram and list of capabilities.

ISPN1121pfSense / OPNsenseLaptopPhoneIoT VLAN
  • Ad and tracker blocking (pfBlockerNG / Adguard)
  • Scheduled parental controls
  • IoT device isolation in a separate VLAN
  • VPN client for encrypted internet traffic
  • DNS-over-TLS for secure DNS queries
ISPN1121Firewall + VPNSwitchPC x10PrinterWiFi APVPN → Remote
  • Firewall rules by department and user
  • Site-to-site VPN between offices
  • Traffic Shaping / QoS for prioritisation
  • Intrusion Detection with Snort or Suricata
  • Captive Portal for guest network
Employee 1Employee 2VPNN1121VPN ServerOffice NetworkServers, files
  • VPN server (WireGuard / OpenVPN / IPsec)
  • Split tunnelling — only office traffic goes through VPN
  • Multi-factor authentication (TOTP)
  • Secure access to file servers and printers
  • Logging and monitoring of all connections
ISP 1ISP 2WAN1WAN2N1121Failover + LBLANInternal Network
  • Multi-WAN with 2 internet providers (port 1 + port 2)
  • Automatic failover when one ISP goes down
  • Load balancing between the two providers
  • Port 3 for DMZ or monitoring network
  • Real-time monitoring of each WAN connection
Comparison

Compare the 3-year cost

N1121 + pfSense
Ubiquiti USG Pro
Fortinet 40F
Meraki MX67
Hardware
~£254
~£264
~£528
~£439
Annual licence
£0
£0
~£352
~£660
3-year cost
~£254
~£264
~£1,583
~£2,418
Open-source
Yes
No
No
No
AES-NI
Yes
No
Yes
Yes
WireGuard VPN
Yes
No
No
No

* Approximate prices excluding VAT. Price for N1121 Ready-to-Go (4GB RAM + 64GB SSD + pfSense).

Up to 10x lower cost over 3 years

without compromising on functionality

Packages

Configurations

Barebone

For DIY users

from £163
  • N1121 chassis + motherboard
  • 12V power adapter
  • No RAM or SSD
  • No operating system
Request a quoteor via email / contact form
Recommended

Ready-to-Go

Plug and play

from £254
  • N1121 + 4GB DDR4 + 64GB SSD
  • pfSense or OPNsense installed
  • Basic configuration (WAN/LAN/DHCP)
  • 30 min online assistance at start-up
  • 72-hour burn-in test
Request a quoteor via email / contact form

Complete Solution

Everything configured for you

from £340
  • N1121 + 8GB DDR4 + 64GB SSD
  • pfSense or OPNsense installed
  • WiFi module included
  • Customised firewall rules
  • VPN server configuration
  • Ad blocking + IDS/IPS setup
  • 1 hour remote support
Request a quoteor via email / contact form

* Approximate prices excluding VAT. Exact quote on request.

Calculator

Configure your N1121

Choose components and see the approximate price. Send the configuration directly via WhatsApp for an exact quote.

Your Configuration

N1121 Barebone£163
Total
£163
Request a quote on WhatsAppOr send an enquiry by email

* Approximate prices excluding VAT.

Capabilities

What can the N1121 do with pfSense/OPNsense?

🛡️Stateful Firewall
🔐VPN Server (OpenVPN, WireGuard, IPsec)
🌐VPN Client
🔍IDS/IPS (Snort, Suricata)
🚫Ad Blocking (pfBlockerNG)
🔒DNS-over-TLS / HTTPS
📡VLAN support
Traffic Shaping / QoS
🏷️Captive Portal
🔄Multi-WAN / Failover
🌍Dynamic DNS
📊Network Monitoring (ntopng)
🔑DHCP / DNS Server
💾Proxy Server (Squid)
⚙️High Availability (CARP)
📈Bandwidth Monitoring
FAQ

Frequently Asked Questions

Yes. The N1121 is fully compatible and tested with pfSense CE and OPNsense. The Intel i226-V network chips are recognised natively by FreeBSD, on which both systems are based. We can deliver the device with pre-installed software of your choice.

With OpenVPN -- approximately 200-400 Mbps depending on encryption. With WireGuard -- up to 800+ Mbps thanks to the AES-NI hardware acceleration of the Intel Celeron J6412. For IPsec IKEv2 -- over 500 Mbps.

It comfortably supports 20-50 devices in a home or office environment. With proper configuration and without heavy IDS/IPS, it can support more. For over 100 devices we recommend a more powerful model.

The N1121 has an M.2 slot for a WiFi module, but for better performance and coverage we recommend a separate WiFi access point connected to the LAN port of the N1121.

2 years hardware warranty with local service in the UK. The software (pfSense/OPNsense) is open-source and is maintained by the respective communities.

Under 15W during normal operation (12V x ~1.2A). The fanless design means 0 decibels of noise and zero fan maintenance.

Yes, full IPv6 support from both the hardware side and in pfSense/OPNsense. Dual-stack (IPv4 + IPv6 simultaneously) is also supported.

Yes, the N1121 supports Windows 10/11 and Linux for standard use. This page is focused on the firewall/VPN application. For full specifications see the product page.

Ready to secure your network?

Contact us for a free consultation. We will help you choose the right configuration for your needs.

sales@iwill.co.uk