Maybe my comments are two months too late, but here they are:
The Self-Asessment-Questionaire will accept a firewall which drops all packets between the POS Terminal and any Device which isn't its specific hosting Server/Subnet. This is easily configured in DD-WRT using a couple of 'iptables'...