I personally recommend upgrading them, if not then ensure they are isolated from the rest of the network as well as ensure they do not have WAN access. Further ensure they are protected by an up-to-date AV with regular scans.
Think hard if you really need them as you may be able to remove then entirely. Regards Ben Lavender On Wed, 15 Jan 2020, 05:25 john doe, <johndoe65...@mail.com> wrote: > Hi, > > I have a Debian server serving/doing DHCP/DNS/firewall/..., as of today, > Microsoft stops supporting Windows7. > > Is there anything that I could do to protect those Windows7 hosts that > are behind this server? > > P.S. > > For the sake of this question, upgrading to W10 /buying new Windows > devices is not an option. > > -- > John Doe > >