quoting myself from another thread:
if you want to have a rather secure PAN for yourself as non-Hacker this is probably the best - single commlink - possible:
Transys Avalon with Toolbox and Biofeedback Filter programs.
The Biofeedback Filter description says p.184 "Biofeedback Filter: Allow Device Rating or Body roll to soak Matrix damage."
So then your Transys Avalon rolls 3 Firewall + 2 Data Processing + 6 Device Rating = 11 Soak Dice against "Data Spike". With "Full Matrix Defense" it gets the Firewall a second time for 14 Dice.
Note that Biofeedback Filter only works for Matrix Damage not Matrix Defense in general. So against Brute Force the Defense would be Firewall + again Firewall from Full Matrix Defense + your Willpower.
Both Data Processing
and Active Program Slots are listed as limit how many programs you can run. But at different places and not together. So maybe Errata changes stuff there, same as for the odd Biofeedback Filter.
If you want to do other stuff with the Commlink:
"Browse" for 1 free Edge on Matrix Search
"Overclock" for 2 Dice (1 of them Wild) for all Matrix tests, is illegal so produces 1 Overwatch score when u use it, but can be used together with "Browse" for Matrix Search as non-Hacker.
(and as was already mentioned in this thread: Signal Scrubber is almost a must have)
On a side note, i dont think its very "realistic" if you play a char that never uses the Matrix ... with a DR 1 Commlink (since 0 Active Program slots) you can run no programs so it would be like using an ultra cheap mobile device today ... you will have a hard time doing every day stuff. (want to know when the bus will arrive ? too bad there is no sign and you cant access the website nor the app ^^)
So i would use a Device 4 Commlink as minimum unless you have only "E Ressources" for example. Then take the Meta Link DR 1 and get a better one in game as soon as possible.