How do we secure warehouse handhelds and label printers?

Mostly with network design, because these devices cannot run security software. Put handheld scanners, label printers, conveyor controllers and the warehouse Wi-Fi on their own network segment that reaches only the warehouse management server and the printers it needs, not office PCs or the internet at large. Use a separate Wi-Fi network with per-device or certificate authentication instead of one shared password that every former temporary worker knows, keep the handhelds' operating system and apps updated through their management tool, and lock them to the warehouse app. Retire devices the vendor no longer updates. Then watch the segment, because one compromised handheld on a flat warehouse network can reach everything else. NetSenX watches the segment from one agent on a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port: the network map lists the devices, and scanning, beaconing and unusual outbound volume are flagged on every plan.

← All 50 questions on OT and IoTAll topics