How would people go about locking down / securing the embedded PC's that run industrial printers / printing machinery? These are the sort of epic printers / envelope stuffers / other crazy machinery you would find in a full scale printing environment. A lot of these devices have embedded PC's running all manner of [mainly Windows] OS's and custom programs for the printing.
What do you recommend for security? They have to be on the production LAN to access job servers & to print to, so a separate VLAN is out. What do people do about AntiVirus?