I personally recommend upgrading them, if not then ensure they are isolated from the rest of the network as well as ensure they do not have WAN access. Further ensure they are protected by an up-to-date AV with regular scans.
Think hard if you really need them as you may be able to remove then entirely.
Hi,
I have a Debian server serving/doing DHCP/DNS/firewall/..., as of today,
Microsoft stops supporting Windows7.
Is there anything that I could do to protect those Windows7 hosts that
are behind this server?
P.S.
For the sake of this question, upgrading to W10 /buying new Windows
devices is not an option.
--
John Doe