Security & connectivity
How can we keep a machine that requires SMB1, NFS2, or FTP without exposing those protocols broadly?
Updated
OT-Max
Direct answer
Place a gateway at the machine boundary so the control can continue using the legacy protocol locally while the network-facing side uses a modern alternative such as SMB3 or SFTP. This preserves a productive asset while reducing where the older protocol exists and who can reach it.
Practical checkpoint
Verify both directions of the required file flow and confirm the legacy protocol is not routable beyond the intended machine-side segment.