In digital signage scenarios, the ideal approach is to place signage devices in a separate VLAN, allowing only the necessary one-way or restricted communication with the content management server, and not allowing them to access the office network, financial systems or customer databases.