Let’s get your team trained and using Microsoft Copilot and moving your business forward. Click here to book +61 3 4803 4915Client PortalRemote Support
Belton IT Nexus
Belton IT Nexus · Est. 2004 · Newmarket, AucklandAbout us ›
Home/ Services/ The Belton Blueprint

The Belton Blueprint

Twenty-two years of deploying technology for Australian businesses, distilled into a stack we trust. Not products we sell for margin, what we'd recommend to our own family.

AzureCloud standard Microsoft 365Productivity SentinelOneEndpoint defence FortinetNetwork security

After deploying and supporting technology for hundreds of Australian businesses, we've refined our recommendations to vendors and products that consistently deliver. This isn't a list of products we sell because of margins or kickbacks. It's what we actually use, what we'd recommend to our own family, and what we can support properly when things go wrong.

You don't have to use everything listed here. Many clients come to us with existing systems, and we're happy to support what works. But when you ask us what we recommend for a business starting fresh or ready for a refresh, this is what we recommend.

The best technology stack is one that works together seamlessly, scales with your business, and can be properly supported when something breaks at 2am.

What follows is our thinking on each layer of a modern business technology environment. Not just what we recommend, but why.

Foundation
§01

Where your business runs

Infrastructure & devices

The infrastructure question used to be simple: buy servers, put them in a closet, hope nothing catches fire. Today it's more nuanced. Most businesses we work with end up with a hybrid approach, and that's usually the right answer.

For cloud infrastructure, we standardise on Microsoft Azure. It integrates naturally with the Microsoft 365 environment most businesses already use, Azure Active Directory, conditional access policies, seamless authentication. For businesses that need on-premise servers, whether for compliance, latency, or simple economics, we spec Lenovo ThinkSystem hardware. Reliable, well-supported, excellent value.

Devices your team uses

Endpoint selection matters more than people think. Cheap consumer laptops cost more in the long run. For most users, Lenovo ThinkPad or HP EliteBook laptops hit the sweet spot. For executives and mobile workers who want something premium, Microsoft Surface devices work beautifully with the Windows ecosystem. For creative teams or anyone who prefers macOS, we fully support Apple MacBook deployments, including proper MDM integration with your Microsoft environment.

Productivity
§02

How your team communicates

Microsoft 365 & voice

This is the easiest recommendation we make: Microsoft 365. Nothing else comes close for business productivity. Email, calendar, file storage, collaboration, video meetings, real-time document editing, it all works together, it's constantly improving, and it's what most of your clients and partners are already using.

The key isn't just having Microsoft 365. It's having it properly configured. Security settings tuned appropriately. Conditional access policies protecting your data. SharePoint structured sensibly. Teams deployed in a way that actually helps collaboration rather than creating notification chaos.

Phone systems

Most of our clients use our Belton VoIP service, which starts at $28/month per user with all the features you'd expect, or Microsoft Teams Phone for organisations that want everything in one app. For businesses with complex call routing, call centre requirements, or those who prefer a dedicated phone system, we deploy 3CX. Feature-rich, flexible, and works well whether hosted or on-premise.

Security
§03

How we keep you protected

Layered defence

Security isn't a product you buy. It's layers of protection, each catching what the others miss. We approach security holistically: identity protection, endpoint security, network security, email security, backup and monitoring. No single tool does everything, and anyone who tells you otherwise is selling something.

For endpoint protection, we've moved our entire client base to SentinelOne. Traditional antivirus looks for known bad signatures. SentinelOne watches behaviour and stops threats it's never seen before, with rollback capabilities when ransomware gets through other defences.

Network security means Fortinet FortiGate firewalls for any business with an office. Next-generation firewalls that inspect traffic properly, block threats at the perimeter, and provide secure VPN access for remote workers.

Identity is the new perimeter. Every login is a potential attack surface.

Microsoft Entra ID handles identity and access management for our clients. Multi-factor authentication on everything. Conditional access policies that check device compliance before allowing access. Single sign-on that reduces password fatigue while improving security. We also run security awareness training, because your team is always the first line of defence.

Recovery
§04

When things go wrong

Backup & continuity

Backup isn't exciting until you need it. Then it's the only thing that matters. Every single time, the difference between a minor inconvenience and a business-ending catastrophe was whether backups existed and whether they worked.

Microsoft 365 deserves special attention here because most people assume Microsoft backs up their data. They don't, not in any useful way. We deploy third-party backup for every Microsoft 365 tenant we manage.

For on-premise servers and critical workloads, we typically deploy Datto BCDR or Veeam Backup, depending on the requirements. Datto can spin up a failed server as a virtual machine within minutes, not hours or days. Veeam gives us flexibility for complex environments. Everything replicates offsite, everything is encrypted, and we test restores regularly, because a backup you've never tested isn't a backup, it's a hope.

The discipline
§05

Why we standardise

A starting point, not a straitjacket

Some IT providers will deploy whatever the client asks for, whatever's cheapest, whatever they can find. That approach creates technical debt, support nightmares, and environments where nothing works together properly.

We standardise on specific vendors because it lets us support you better. Our engineers know these products deeply. When something breaks at 2am, they're not learning on the job. When a vulnerability is announced, we know exactly which clients are affected. When vendors release updates, we've already tested them in our lab.

That said, we're not rigid. If you have a specific business requirement that our standard stack doesn't meet, we'll find the right solution. If you have existing systems that work well, we're not going to rip them out just to match our preferred vendors. The blueprint is a starting point, not a straitjacket.

Our stack
§06

Products & services we deploy

The full list
◉ Environment
Servers & cloudLenovo servers, Microsoft Azure, Belton Cloud, Microsoft 365
EndpointsLenovo, HP, Microsoft Surface devices
✉ Communication
Productivity suiteMicrosoft 365 email, document storage, collaboration, Teams
Voice & calling3CX, Microsoft Teams Calling, Belton Cloud Calling
Email brandingBelton managed email signatures
⚿ Network & security
Endpoint protectionBelton managed NGAV+EDR powered by SentinelOne
Network infrastructureFortinet firewalls, switching and wireless networking
Remote accessFortiClient VPN, Fortinet Endpoint Management Server
Identity & accessMicrosoft Entra ID MFA
Security bundlesBelton Security Essentials & Premium bundles
☁ Recovery
Cloud backupBelton managed 365 backups
Business continuityDatto BCDR backups
Endpoint backupDatto endpoint backups
Enterprise backupBelton managed Veeam backups
Already have systems?

You don't need to start from scratch. Many of our clients come to us with existing infrastructure, software and vendors they're happy with. That's fine with us.

We can work with what you have and build a bespoke support plan around your existing environment. Whether it's legacy systems, specialist software, or simply tools your team knows and loves, we'll support it properly.

Discuss your setup

Ready to build your
technology stack?

Let's design a solution tailored to your business needs and budget. Whether you're starting fresh or ready for a refresh.

NEW ZEALAND OWNED & OPERATED EST. 2004
Sovereign by design

New Zealand owned and operated.

Sovereign data centres across New Zealand and Australia, with your data kept onshore wherever it's required. Our team understands New Zealand, and our leaders have built, scaled and secured businesses right across the New Zealand landscape.

Sovereign data centres · New Zealand & Australia
  • Auckland
  • Christchurch
  • Sydney
  • Melbourne
  • Brisbane
  • Perth
International data-centre operations
  • Singapore
  • Germany
  • Netherlands
  • USA

Servers available in minutes, not days.

Explore data centres & hosting →
Accredited partners
Microsoft Solutions Partner Fortinet Partner Lenovo Partner HP Partner Apple Business Manager