Plug-and-play firewall appliance

Plug it in.It works.We watch it for you.

One small appliance replaces your fragile office router with business-grade security, a branded guest Wi-Fi portal, VPN for remote staff and content filtering — all managed by us from the cloud, and fully working even when the cloud isn't.

See how it works
Up and running in 10 minutes — no IT staff required
10 min
From box to live
24/7
Cloud monitoring by us
0
Downtime if the cloud drops
1
Device, one bill
Security out of the box

Real protection, zero expertise required

The moment it's plugged in, your network is defended by the same layers enterprises pay specialists to maintain — kept up to date automatically by us.

Threats blocked automatically

Known malware command-and-control, scanner IPs and malicious hosts are dropped at the edge using live threat feeds we keep fresh.

DNS & content filtering

Block ads, phishing, adult and risky categories network-wide. No software on any device — filtering happens on the box.

Block by country

Cut off traffic from entire high-risk regions with GeoIP rules. Stop attacks before they ever reach your network.

Self-healing changes

Every setting is verified before it sticks. If a change would knock the office offline, the box rolls itself back automatically.

Anti-spoofing & encrypted DNS

Spoofed traffic is dropped and DNS is encrypted upstream (DoT), so lookups can't be hijacked or snooped.

Always up to date

Blocklists, threat feeds and the box software itself are updated remotely by us — safely, without a site visit.

The differentiator

A guest Wi-Fi portal that works with ANY router

A commercial-grade captive portal built into the gateway. Keep your existing access points — brand the splash with your logo, your colours and your terms, and choose exactly how guests get online.

One-tap access

Guests accept your terms and they're online. Frictionless for cafés and waiting rooms.

Voucher codes

Print or sell time-limited codes — perfect for paid or front-desk Wi-Fi.

SMS verification

Identify guests by phone number — the method required by Azerbaijani public-Wi-Fi law.

Social / account login

Sign in with Facebook or Google, or issue named staff and VIP accounts.

Your data stays on your box

Guest details are stored on the appliance in your office — never handed to a foreign social-Wi-Fi vendor's cloud.

Built for local law

User identification plus 1–2 year log retention out of the box — compliant with Azerbaijan and Turkey public-Wi-Fi rules.

No per-venue monthly fee

Unlike cloud 'social Wi-Fi' services, there's no recurring charge per location for the portal itself.

Rules per audience

Different speed limits, daily quotas and time windows for guests, staff and VIPs — set once, enforced automatically.

One device. One bill. Zero surprises.

Everything a small business needs at the network edge, consolidated into a single managed appliance.

Firewall & NAT routing
Branded guest Wi-Fi portal
VPN for remote staff
DNS & web content filtering
Per-device bandwidth monitoring
Multi-WAN failover
Threat & GeoIP blocking
IPv6, VLANs & QoS
Managed & resilient

Managed from anywhere. Survives anything.

We run it for you from a single cloud dashboard — and your internet never depends on that cloud staying up.

We manage it for you

Every office on one dashboard. We push changes, updates and fixes in seconds — no on-site visit.

  • See every site and device at a glance
  • Config changes pushed remotely in seconds
  • Real-time alerts when something needs attention
Offline-proof

Never down because of 'the cloud'

The box keeps routing, filtering and serving Wi-Fi on its last-known-good settings even if our servers are unreachable.

  • Routing, DHCP & DNS keep running offline
  • Guest Wi-Fi login keeps working in an outage
  • Cloud is for management — never for survival

Live in 10 minutes

No configuration, no IT engineer, no manual.

1

Plug it in

Connect your internet line to WAN and your office switch or access point to LAN.

2

Scan the QR

Scan the code from your cloud portal to bind the box to your account.

3

You're protected

The network comes up secured and filtered — and we can see, manage and fix it from anywhere.

Built for businesses, not data centres

Anyone who needs business-grade network security without hiring a network engineer.

Cafés & restaurants
Clinics & dental
Hotels & guesthouses
Retail & chains
Small offices
Co-working spaces

Frequently asked questions

Everything you need to know before getting started.

Do I need to replace my Wi-Fi access points?
No. The guest portal works with any router or access point you already have — you keep your existing Wi-Fi and just add the appliance at the edge.
What happens if my internet or your cloud goes down?
Your network keeps working. The box runs on its last-known-good settings — routing, filtering and even guest Wi-Fi login continue without the cloud.
Do I need an IT person to run it?
No. That's the whole point — we configure, monitor, update and fix it remotely for you. You plug it in and use your internet.
Is guest data sent to a foreign company?
No. Guest details stay on the appliance in your office, with retention that complies with Azerbaijani and Turkish public-Wi-Fi law.
Can a bad change break my office network?
Every change is verified before it's kept. If something would take the office offline, the box automatically reverts to the previous working configuration.

Ready to plug in real security?

Tell us about your site and we'll recommend the right appliance and guest-Wi-Fi setup — and run it for you.

Talk to us
Onyx Firewall — Plug-and-Play Business Firewall & Guest Wi-Fi | ONYX