Every time you connect your Windows or Mac laptop to a public Wi-Fi hotspot, you risk the possibility that someone else on the network might tap your Web traffic or even steal data from your computer. Common wisdom advises that you use a virtual private network (or VPN) to protect such a connection. XOnet, from x.o.ware, offers a different solution, one that's hardware-based and ultra-secure. It provides that secure VPN-like connection, but needs an ease-of-use overhaul.

How It Works
The $99.99 combo package reviewed here contains one XOnet unit and one XOkey. You can also purchase an additional XOkey for $40, or an additional XOnet for $70. The XOnet itself is a small black box, about 0.7 by 3.4 by 3.1 inches (HWD), with two Ethernet ports on the back, as well as a USB port on the front. Status lights for power and the two Ethernet ports round out XOnet's visible features.

A typical software-based VPN utility encrypts your browser's request for data and sends it to a VPN server. The server connects to the website, makes the actual request, encrypts the returned data, and sends it back to your PC for decryption. This has the added effect of hiding your actual IP address from the receiving website; all the site sees is the IP address of the VPN server. And of courses any location-based permissions or restrictions are applied based on the server's address.

Paired with its companion XOkey, the XOnet device offers a direct encrypted connection to your home network, without going through a third-party server. That hacker in the corner of the Internet café can't see any of your Web traffic. Your surfing activity takes place from your home network. You don't get the anonymity or location-spoofing that comes with a standard VPN, but there's no middleman, no remote possibility that the VPN provider might turn evil and steal your data. And, as I'll detail later, there are other advantages to having a direct line into your home network.

Configuring the XOkey
The XOkey device is tiny, about 1.4 inches square and 0.4 inches thick. It comes with a small USB to Micro-USB adapter. In testing, I found the adapter to be a bit flimsy; my company contact confirmed that using a third-party micro USB cable may give you a more reliable connection.

A page of instructions included with the combo advises configuring the XOkey first. Amusingly, the XOkey comes in a foil packet labeled "Always use protection."

To start, you install a driver on your Windows or Mac laptop and reboot. For testing, I used a Lenovo ThinkPad T420s. After rebooting, plug in the XOkey to its adapter, and plug the adapter into the laptop. It takes about 15 seconds to boot into its Linux-based operating system.

Once it boots, you log in using any four characters. Of course, the very next step is to create your actual password, which must be strictly alphanumeric. Don't forget that password! If you do, your only recourse is to reset the device by poking a paperclip into the tiny reset hole, and start all over. With XOkey configuration complete, you can put the XOkey aside and get the XOnet set up.

Configuring the XOnet
You can install the XOnet in two ways, LAN Mode or In-Line Mode. LAN mode is incredibly straightforward. Just connect the device to a spare Ethernet port on your router or a network switch and plug in its power. It's now ready to provide remote access to your Internet connection and local network resources. If you plug a network switch into its output port, any local devices connected through that switch get the benefit of XOnet's filtering (more on that later).

It's possible that your router's firewall might interfere with the XOnet's operation. According to the company, giving the device control of port 4500 can help. Failing that, you can install it in In-Line Mode, connecting it between the incoming Internet connection and your regular router. In In-Line Mode, you can remotely access your home Internet connection, and any filtering options you turn on affect the whole network. However, you won't be able to see or use any other network resources manually.

Savvy users can take advantage of an unstated third mode by using the XOnet (with a little help) to replace the existing router. Since it only has one output port, you'll definitely need a network switch. If you need Wi-Fi, you'll have to connect a separate wireless access point, like the EnGenius ENS1750 Dual Band Outdoor Access Point. In this mode, the XOnet offers remote access to your Internet connection and devices, and also filters traffic for all of those devices.

To configure your newly installed XOnet, you simply log into it from any browser. Well, almost any. In testing, I found that certain features did not work under Internet Explorer, a fact confirmed by my company contact. Note, too, that when you first log into the device, you'll see a scary warning that the connection is not secure. That's not uncommon with hardware-based security products. I saw the same thing when reviewing the Circle with DisneySee it at Amazon UK and the Peace Wireless RouterSee it at Amazon UK parental control devices.