Just make certain that you have a tested avenue (secondary boot, tested USB boot) to have the HW run an alternate OS so that your VM with the legacy apps is certain to run. XP is good enough if you do not have to access the WAN even without an air gap.