A host computer supports a virtual guest 
system running thereon. The host 
system has a firewall that prevents it from communicating directly with 
the Internet, except with predetermined trusted sites. The virtual guest runs on a 
hypervisor, and the virtual guest comprises primarily a browser program that is allowed to contact 
the Internet freely via an 
Internet access connection that is completely separate from the host computer connection, such as a dedicated 
network termination point with its specific Internet 
IP address, or by tunneling through the 
host machine architecture to reach 
the Internet without exposing the host 
system. The virtual guest system is separated and completely isolated by an internal firewall from the host, and the guest cannot access any of the resources of the host computer, except that the guest can initiate 
cut, copy and paste operations that reach the host, and the guest can also request print of documents. The host can transfer files to and from a virtual data 
storage area accessible by the guest by manual operator action. No other transfer of data except these user initiated actions is permitted.