Re: Gaming Consoles/UPnP

["Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU>]

Andrew,

  Here at TU, we have provided a 'Gaming' network (wireless ssid, and vlan for Ethernet ports) with public ip addresses 
for the devices.

They still need to register the device with our NAC, but otherwise they are unfiltered public addresses for the gaming 
consoles.

  It's not ideal, and definitely not my first preference, but was the only workaround our networking team could find.

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743




From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Pete, Andrew
Sent: Wednesday, November 13, 2019 3:21 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Gaming Consoles/UPnP

We regularly get requests/complaints from students living on campus that they are unable to play some games online.  
The issue is that the game console is trying to use UPnP to open up ports on the firewall.  This doesn't work since 
UPnP isn't supported on enterprise equipment.  From what I could find on other institution's websites, their stance is 
they do not support these devices.  I'm curious to hear if anyone has a different stance and if they have a working 
solution.  I know configuring a 1 to 1 NAT is a possibility but that would require purchasing a large block of public 
addresses.


Andrew Pete

Information Security Architect



New England Institute of Technology

One New England Tech Boulevard

East Greenwich, RI 02818-1205

401-780-4460 (Direct)

apete () neit edu<mailto:apete () neit edu>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C88e85d7648cb4274fe4208d7687f60ea%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C0%7C637092768622007958&sdata=5BURU1r7fdmTqGIOso6jZf74JMJITEeYzLb%2FETxWycY%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community