Get the best commlink possible. Then, for 4 parts, you can modify by taking 1 point from data processing and putting it into the firewall.

A Transys Avalon (base cost 5000), 6 DP, 6 FW 20 parts (4000) Modified Transys Avalon 1 DP, 11 FW

You can barely google and even that's a bit laggy. But you're more virus proof than a chromebook.

Add in a program module with program carrier running encryption and whatever else you might find useful. I like having a rating 4+ agent constantly trying to identify and label (via ARO) all silently running devices near me.

You can add up to 5 additional firewall by taking a hit to your devices matrix condition monitor (starting at 11) at a cost of (new rating x 2). Best you do this before modifying, so it would cost (14, 16, 18, 20 and 22 parts, total of 90 parts, or 18k nuyen)

Total cost, 28.5k nuyen. Modified Transys Avalon with 1 DP, 16 FW. Of course, if someone penetrates that firewall, it's a 1 hit ko for that device (matrix condition monitor 1)