what mitigation techniques would you suggest if upgrading or replacing a vulnerable OS was not an option?