This is an automated archive.
The original was posted on /r/sysadmin by /u/ovway39 on 2024-01-18 22:35:59+00:00.
How do you all handle keeping your servers up to date? I just joined an org on a 2 year contract and found they've got 50+ servers running old versions of CentOS and Debian. Many of the systems are running custom code. None of these systems are on the public internet.
How would you handle this? Upgrading them to the latest OS get us nothing tangible in terms of features/performance. We do have firewalls, IDS/IPS and the like. Do we isolate those old systems and leave as is or put money into modernizing them? Or something else? What strategies do you guys use?
EDIT: Most (95%+) systems are running custom in-house built applications. No real concern of a vendor dropping us. The auditor comments are spot on though. Some of these systems will naturaly phase out and EOL on their own due to no longer being a business need.
2nd EDIT: All the systems are VMs