Does anyone have any legacy XP machines on their network?

We have a handful that run either custom apps, or applications to expensive to upgrade, just curious. We had talked about putting firewalls in front of these machines.,