# How do we secure warehouse handhelds and label printers?

Mostly with network design, because these devices cannot run security software. Put handheld scanners, label printers, conveyor controllers and the warehouse Wi-Fi on their own network segment that reaches only the warehouse management server and the printers it needs, not office PCs or the internet at large. Use a separate Wi-Fi network with per-device or certificate authentication instead of one shared password that every former temporary worker knows, keep the handhelds' operating system and apps updated through their management tool, and lock them to the warehouse app. Retire devices the vendor no longer updates. Then watch the segment, because one compromised handheld on a flat warehouse network can reach everything else. NetSenX watches the segment from one agent on a SPAN or TAP port: the network map lists the devices, and scanning, beaconing and unusual outbound volume are flagged on every plan.

FAQ: [OT and IoT](https://netsenx.com/en/faq/ot) · https://netsenx.com/en/faq/how-to-secure-warehouse-handhelds-and-label-printers

## Read next

- https://netsenx.com/en/ot-network-monitoring
- https://netsenx.com/en/compare

## Related questions

- [Does every warehouse scanner count as a device in NetSenX pricing?](https://netsenx.com/en/faq/does-every-warehouse-scanner-count-as-a-netsenx-device)
- [How do we monitor medical or lab devices that cannot run security software?](https://netsenx.com/en/faq/how-to-monitor-medical-devices-that-cannot-run-security-software)
- [Can NetSenX monitor OT and industrial networks?](https://netsenx.com/en/faq/can-netsenx-monitor-ot-and-industrial-networks)
- [Can you monitor an OT network without affecting PLCs?](https://netsenx.com/en/faq/can-you-monitor-an-ot-network-without-affecting-plcs)
- [Which industrial protocols does NetSenX read?](https://netsenx.com/en/faq/which-industrial-protocols-does-netsenx-read)