Nitrokey · Network security
NitroWall VP4670
Six-port 2.5 GbE OPNsense firewall appliance on an i7 with AES-NI — the high-throughput NitroWall for an office perimeter, segmented VLANs, or a small datacentre rack shelf.
$1,540
EU equivalent: €1,232 incl. VAT · nitrokey.comShips direct from Nitrokey (Germany) · typically 5–10 business days
Vegas batch closed — buy direct on Nitrokey, or get notified when the next bulk batch opens.
Get the next Nitrokey batch
The Vegas batch has closed. Need it now? Buy direct on Nitrokey. Rather wait for the next bulk run — group pricing, PO/invoicing, and event pickup? Tell us what you’d order and we’ll email you the moment it opens. No commitment; enough interest is what schedules the next batch.
Lithium coin cell (clock/CMOS)
Contains a small lithium coin cell for the real-time clock, as almost all computers do. No special handling on your side.
Why the NitroWall VP4670
What this network security does that alternatives don't.
Six 2.5 Gigabit ports
Intel i226-V NICs across six 2.5 GbE ports allow real segmentation — separate VLANs for guests, IoT, and trusted workstations without a second appliance.
AES-NI for line-rate VPN
The i7-10810U has hardware AES acceleration, so IPsec and WireGuard tunnels are not bottlenecked by the CPU.
Open firmware, open firewall
Runs OPNsense on hardware Nitrokey supports — no vendor cloud dependency and no licence tied to a support contract.
Specifications
Full technical details.
Compliance framework mapping
Controls this product satisfies across 12 frameworks.
Network boundary protection and monitoring
Stateful firewall with IPS at the network perimeter. All inbound/outbound traffic inspected with Suricata rule sets. VPN gateway replaces consumer VPN dependency.
Supply chain risk — hardware and firmware
Open-source firmware is publicly auditable and reproducibly built. EU jurisdiction hardware is not subject to US National Security Letters. Directly addresses hardware supply chain risk in CMMC and NIS2.
Compared to
Honest comparisons against the most likely alternatives.
vs. NitroWall V1410
The VP4670 has six 2.5 GbE ports and a faster i7 against the V1410's lighter configuration — the choice is throughput and segmentation depth.
vs. NitroWall NW750
Different jobs entirely: the NW750 is a battery-powered travel router, the VP4670 is a fixed perimeter appliance.
Shipping & returns
What to expect after you order.
Shipping
Ships from our Tennessee 3PL. 2-day FedEx to most US addresses, expedited options at checkout. Signature required. Business day processing — orders placed before 2pm ET ship same day.
Returns & RMA
30-day return window for unopened units. Defective units handled under Nitrokey's 2-year warranty — we manage the US-side RMA so you don't ship to Berlin.
Purchase orders
Net-30 terms available for approved organizations. W-9 on file. Generate a quote from the stack builder or email sales@securitygadgets.shop with your PO requirements.
Authorized reseller
We are an official Nitrokey authorized reseller. Full manufacturer warranty applies. Identical hardware and firmware to buying direct from nitrokey.com — with US inventory and support.
