Re: Student Network connections

["Ferguson, Michael" <mferguson () CHAPMAN EDU>]

Frank,

Our experience, particularly this year, is that we’re right at roughly 1 gpps of Internet use per kilo-head in our 
residential complex.  However, when students are on campus, whether in class or at the library, I’d say our Internet 
use is roughly 350 mbps per kilo-head because students aren’t doing as intensive network use like watching Netflix when 
on campus compared to when they’re in their dorm room.

We provide a full complement of security filtering for our end-users—IPS, URL filtering (primarily for malware), App 
Control (primarily for Botnet Protection) and A/V scanning.   Needless to say, we had to appropriately size our 
next-gen firewalls with all these features “turned-on.”

However, we couldn’t really drop our residential complex from our Campus Internet connection and significantly reduce 
the size of security devices managing our network.  We have 2 peaks of Internet use, one is late afternoon and the 
other is late evening.  The first peak is due primarily to Internet use from on campus, whether faculty or staff 
working or students using wireless on campus during late afternoon.  The amount of traffic from the Reshalls during 
this time is relatively modest.  However, at nighttime during our second peak, almost all of our Internet use is from 
the Reshalls.

The peaks at each time are roughly the same amount of bandwidth use.  So if we dropped our Reshalls from the campus 
Internet, we would really only reduce our bandwidth use at night, but not during the late afternoon.

--
Mike Ferguson
Chapman University
Network Manager
714-744-7873
mferguson () chapman edu<mailto:mferguson () chapman edu>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Frank 
Barton
Sent: Monday, December 12, 2016 6:41 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Student Network connections

Good morning folks, We are in the process of looking at dropping our student, residential, network connections onto 
their own internet connection, partially because of their bandwidth needs.

When we look at our business network, we have high standards for protection, monitoring, IPS, etc. When looking at the 
student connections, how are other folks treating them? Stateful Firewall? full IPS? DPI? Content filter? from the cost 
side of the equation, the traffic that a "firewall" can handle drops drastically the more layers to the security onion 
you enable.

As a side, related, question - how much bandwidth are you providing to your students on a "per-head" basis? (or per 
kilohead) In the recent FCC report on bandwidth usage,  for K-12 they advocated for 1Gbps per kilostudent, however the 
use-case for residential university students is different than for non-residential K-12 students.

Thank You
Frank

--
Frank Barton
ACMT
IT Systems Administrator
Husson University