Home Forums Discussions General Discussion Version 10.2.0

Depends on the level of blocks that are setup. If it really has no connection to the network (no eprescribing, filesharing, etc.) then you should be fine. No client machines accessing it. It's possible but unlikely you have it set up the way in which it would be safe. You would need to filter LAN traffic and Internet traffic out. Almost every ransomware released is exploiting the Windows Sharing (SMB Protocol, especially SMB1). Machines only need to be on the same network for it to spread.

However, it's pretty common for stuff like procedure machines (X-Ray, MRI, etc.) where you can't upgrade windows. SOP is to remove them from the LAN or move them to their own VLAN. Tons of people still use XP this way. Those procedure machines cost more than every machine in the office combined.