Your organization uses a time$-$keeping application that only runs on Windows $2000$ and does not run on newer OS versions. Because of this, there are several Windows $2000$ workstations on your network.

Last week, you noticed unusual activity on your network coming from the Windows $2000$ workstations. After further examination, you discovered that the Windows $2000$ workstations were the victim of a malicious attack and were being used to infiltrate the network.

You find out that the attackers were able to gain access to the workstations because of the legacy operating system being used. The organization still needs to use the Windows $2000$ workstations, which need to be connected to the internet, but you want to make sure the network is protected from future events.

Which solution should you implement to protect the network while also allowing operations to continue as normal?