For retail stores, IoT devices such as freezers and lighting can be placed in a separate VLAN, restricting their direct communication with payment systems and POS terminals and allowing only necessary traffic reviewed by the firewall to pass.