Re: Esports

[Thomas Carter <tcarter () AUSTINCOLLEGE EDU>]

Similar to your mention, we use a card access room with 16 gaming rigs.


1)      We don't use AV on the computers - mentions of this elicited complaints from the gamers.

2)      The computers auto-login to a restricted account; "coaches" have administrator level access to PCs. 
Administrators also have USB drives with the OS image and the ability to re-image on the fly if needed. Our goal was to 
be more hands-off for IT.

3)      We do use a small NGFW (Fortigate 50D) that was under $1000 to filter out possibly abusive traffic.  We 
actually had this on-hand from another cancelled project, and it's worked extremely well.  Not necessarily a Fortigate 
fan, but they do have small boxes that can also manage APs as well so it's an all in one solution. We don't have any 
wireless devices yet (PCs and Xbox/PS consoles), so we haven't needed that so far.  We actually do have a regular 
campus wireless AP in the area for personal devices (laptops, phones, etc), and the gaming PCs don't have wireless 
adapters to be able to connect. And hardcore gamers know wired is better than wireless anyway...

4)      We use a 1-1 NAT for the eSports network, so UPnP etc shouldn't be an issue. We certainly haven't run into it 
yet.

5)      As I mentioned, we haven't run into it yet, but I suspect we would use a simple PSK that only the coaches and 
IT knew. Not the greatest, I know, but simple and would probably solve the issue.

An esports player could unplug a cable from a gaming PC and plug into a personal laptop, but there's not much incentive 
to do so (since there's campus wireless there already).  And we've tried to make the esports network more attractive 
for gaming purposes so they won't want to try to mess with things. This school year is just our 2nd year doing this, 
but it's been extremely smooth so far.

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu<http://www.austincollege.edu/>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Pete, Andrew
Sent: Thursday, October 17, 2019 8:42 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Esports

Hi Everyone,

Thanks for the information so far.  We are still working out the design and requirements.  Right now, we are going to 
have a dedicated room with approximately a dozen gaming PCs and the ability to connect an auditorium for tournaments.  
The dedicated room will also be available for gaming through student activities (PC and console).  Access to the room 
will be limited by card and we are going to be using dedicated network gear and ISP connectivity.  We will be putting a 
wireless AP in the room for consoles that do not have wired ports (i.e. Nintendo Switch).  So far this is what we are 
still trying to work out:


1.       What antivirus solution should we use on the machines?  We are leaning towards using CylanceProtect which we 
have deployed throughout the rest of our organization.

2.       How are we going to prevent abuse of the PCs?  I.e. students downloading too many games and filling up drives 
or installing software that they should not.  One idea was to leverage Deep Freeze or a similar solution to lock down 
the systems.

3.       How are we going to prevent abuse of the dedicated network?  I.e. How do we mitigate against malware on the 
network, use of the network for questionable tasks like cryptomining?  We are considering layering various solutions 
such as Cisco Umbrella and a next gen firewall with IPS, AV, etc.

4.       Are we going to run into issues with UPnP with some games by using an enterprise firewall which does not 
support UPnP?

5.       How are we going to limit access to the wireless network from both an authentication and contention/congestion 
standpoint?  We could potentially integrate with our NAC solution but that would require some level of connectivity 
between our protection network and this dedicated network.

Based on how our general student population uses/abuses our network, we can't leave this network wide open.  We want to 
make sure that whatever security measures we put in place will not impact the intended purpose of the room/network.

Andy


Andrew Pete
Information Security Architect

New England Institute of Technology
One New England Tech Boulevard
East Greenwich, RI 02818-1205
401-780-4460 (Direct)
apete () neit edu<mailto:apete () neit edu>

[NEIT_Full_Stack_H_White_BG_PNG1]




From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Greg Williams
Sent: Wednesday, October 16, 2019 4:21 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Esports


This message originated outside of New England Institute of Technology. Use caution when opening attachments, clicking 
links or responding to requests for information.
We have a presence.  What would you like to know?  We have an official club sport ~250 - 300 members, ~80 active users. 
 1 classroom with 10 high end gaming PC's that are officially supported by OIT.  Club officers have the key to the 
room.  Computers are physically locked.
Greg Williams, ME
Director of Operations
Office of Information Technology
Lecturer
Department of Computer Science

University of Colorado Colorado Springs
1420 Austin Bluffs Parkway, (EPC 136A)
Colorado Springs, CO 80918
Connect: Skype<skype:gwillia5 () uccs edu?chat> | WebEx<https://uccs.webex.com/meet/gregwilliams>
www.uccs.edu<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.uccs.edu%2f&c=E,1,Io_1N2Yf7DXD-YCuXbd8Vwlsp37HT0fEIqvnH-Qf7UHT0orsSYqj6d8gqx9LV7Gu6uFBPJcRaIa_VyS1hxAzGOVrhxkdo3v49uR4AAiR9XVvFuqf&typo=1>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Pete, Andrew
Sent: Wednesday, October 16, 2019 1:40 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Esports

I'm interested in chatting with institutions who have an Esports presence.  We are in the process of building out an 
area for this purpose and need to figure some things out from a technical and security standpoint.  This is new 
territory for us and any assistance would be appreciated.


Andrew Pete
Information Security Architect

New England Institute of Technology
One New England Tech Boulevard
East Greenwich, RI 02818-1205
401-780-4460 (Direct)
apete () neit edu<mailto:apete () neit edu>

[NEIT_Full_Stack_H_White_BG_PNG1]



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgwillia5%40UCCS.EDU%7Cccd44e3b42804321461f08d75270b0ab%7C529343fae8c8419fab2ea70c10038810%7C1%7C0%7C637068516281913429&sdata=mvxWocdpjXkjYeU7V%2FhbesHkjgIpVew4TpCZAzXyAJs%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.educause.edu%2fcommunity&c=E,1,ChXX05KeahzHLrySvLH9PJvQYN7rcY1tBtyQYgy3wYNBFc5s1wddTp-Vo_MtcB0vdZ4wrqQDYtYchMIjyhwMjLHSEBoc1zaUzz_vpCzpO1r-fl_EVxg,&typo=1>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.educause.edu%2fcommunity&c=E,1,bbvvf-WgJHjn_9RdRTCpzmZi8tb3CXmcnOPMC4NpyBC-Tdr_G0qVmfHpiFizlTqEUKFwRMFFtjNcyJ_uxwF26U_iVimbghI3fudiSg8OrjzTWyo,&typo=1>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community