Logo NEXFIRWL

Advanced perimeter shielding with OPNsense and OpenWRT.

Two-tier corporate protection for SMB infrastructures that cannot tolerate risk.

Centralise your cybersecurity with a professional dual-firewall architecture. NEXFIRWL combines the power of OPNsense as the main barrier against the Internet with smart OpenWRT segmentation to protect and isolate your internal network.

NEXFIRWL · CONSOLA MONITORIZANDO
Threats · 24h
1.847
↑ 12% vs yesterday
Filtered traffic
42 GB/día
99.97% uptime
Inbound traffic · 60s AllowedBlocked
Recent events
Unified management · live alerts · auditable reports
— PROTECTION ECOSYSTEM

Enterprise-grade security infrastructure on par with large corporations.

With NEXFIRWL you turn a vulnerable network into a robust, segmented environment under absolute control.

NGFW Firewall — OPNsense

Next-generation perimeter protection with GeoIP filtering and IDS/IPS module to block attacks and unauthorised scans before they reach your network.

OPNSENSE · SURICATA

OpenWRT segmentation

Smart management of LAN, VLANs and Wi-Fi to isolate departments, IoT and cameras on independent networks. A breach in one segment does not compromise the rest.

VLAN · WI-FI 6

Professional, secure VPN

Encrypted remote access via IPSec, OpenVPN or WireGuard. Full mobility for your team without exposing the corporate network to unnecessary risk.

IPSEC · WIREGUARD

Web filtering and policies

Comprehensive control of outbound traffic with transparent proxy and block lists for ads, malware and unproductive content.

PROXY · DNS FILTER

Nexumia ecosystem integration

Native connection with NEXCLOUD, NEXERP and NEXSECU. Unified security policy across all your systems, with no silos or conflicting rules.

NEXUMIA API

Visibility and QoS

Advanced traffic reports and bandwidth control (QoS) to prioritise the critical services of your business over the noise.

NETFLOW · QOS
— ARCHITECTURE

Three layers, one single control.

Each layer fulfils a specific mission and talks to the others. The result is a professional infrastructure with no silos, managed from a single point.

◉ BLOCKED · 24H
1.847
SYN 80
XSS
HTTPS
BOT
OPNSENSE · PERIMETER
LAYER 01 · PERIMETER

OPNsense: your next-generation barrier against the Internet.

Advanced internet access protection, traffic control and high-performance perimeter defence.

LAYER 02 · INTERNAL NETWORK

OpenWRT: smart segmentation and full internal control.

Isolates traffic, filters ads and keeps every connected device on your network under control.

NEXFIRWL · SEGMENTATION4 ACTIVE VLANs
VLAN 10 · admin12 hosts
VLAN 20 · production48 hosts
VLAN 30 · guests6 hosts
VLAN 40 · IoT/cameras23 hosts
each segment · isolated · with its own policy
NEXFIRWL · SCALABILITYNodos activos · 6
NEXFIRWL
CORE
Madrid
Barcelona
Remote
Proxmox
Multisede · virtualizado · crecimiento sin fricción
LAYER 03 · SCALE

An infrastructure built for your company’s growth.

Flexible deployment on dedicated hardware or virtualised environments, connecting sites under a single architecture.

— INVESTMENT

Zero per-user licences. Total cost control.

NEXFIRWL replaces the annual subscription model with a one-off investment in your infrastructure. No rising fees, no vendor lock-in, with full visibility.

01
— NO VENDOR LOCK-IN

Open architecture: OPNsense + OpenWRT

Avoid dependency on proprietary vendors and rising fees. 100% on open software under your own economic control.

02
— TRANSPARENT INFRASTRUCTURE

Goodbye to the black box

Full traffic visibility and centralised management. Your technical team keeps real ownership over the perimeter and internal network.

03
— NEXIA INTELLIGENCE

Data, not assumptions

Detailed reports and traffic analytics processed by the NEXIA layer to anticipate threats and optimise performance.

— LET’S TALK ABOUT YOUR PROJECT

Tell us your challenge, we’ll reply within 24h.

A specialist analyses your case and proposes a clear roadmap — no commitment, no hard sell.

What happens when you submit the form

24h response

A real specialist reviews your case.

Free assessment

No commitment, no hard sell.

Proposal in 3–5 days

Roadmap with clear timeline and budget.

Prefer to talk directly?
+34 930 485 363  ·  info@nexumia.eu