Solution for a High School Lab

[ATMCyberShark]

Hello,

I am a high school teacher setting up a cyber security lab. We need to able able to deploy various machines at a time. Our ninth grade students will be configuring machines with Win 7, Win 8.1, Win 10, Server 08, Server 12, Redhat, and Ubuntu servers and O/S (about 1.5 to 2 gb per machine). Additionally, upper classman will be working on virtualized networks of multiple machines and pentesting (2-3 machines at 2gb each). My intention was to use ESXi, after speaking to a representative from VMware, he suggested that I use Horizon. Until that discussion I haven't even heard of Horizon. My question to the group is what is your experience with Horizon in this type of application and what is the best way to earn this.

I have purchased a small server (Dell Poweredge R710 with dual quad core cpu's, 32gb/cpu and two set of hard drive, 2 300gb 15k and 2 at 1TB). I also have several routers and switches (working on CCNA also).

I understand that you may need more information but I am trying to determine how many servers like the one described above am I going to need to service 20-40 students per class period. Part of the challenge is that I am not well versed in this area, so I have to learn it, work it, sell it to district personnel and be able to deploy on September 1, 2016.

I look forward to your feedback and thank you in advance.

Peter

[RyanGoldstein]

Well that sounds like an awesome class, i was lucky enough to go to a high school with a good CS class's but virtualization was just starting (2007 Grad).  So we learned java and C++.

I don't think that horizon is the best product for your scenario.

Horizon View is similar to Citrix Xendesktop, it is a VDI product, for the purpose of testing AV and virus's it does not make sense (I dislike sales people).  It is used widely in education but not in the way you want to use it, they use it to provide remote access to school applications and resources to students.

Horizon is very complex and requires allot of moving parts to always be working.  Look up the horizon 6 administration guide, and the installation guide.  (vmware always publishes these 2 docs for every product) 

That is a very low end server and it wont support 40 students unless they are working in groups.  With that server here is what i would do.

You can turn on 15 machines at a time at 2GB of RAM, don't over provision RAM, you don't have enough.  Even at 15 machines you are pushing it since you lose a chunk of RAM to the hyperrvisor.

If you are looking to have the virtual machines(win7, win8,win10,linux) pre made you will probably need the vcenter product from VMware since you cannot clone virtual machines without it.  (you can export and import, and import and import)  but that can be a PIA.

If the goal is to have the students install the OS as part of your process you wont necessarily need vCenter.

To keep it simple at first, Install ESXi, and create usernames on ESX for your students, give them a vsphere client and probably very clear instructions on how to install the OS.  (They will break stuff)

Snapshots are your friends, encourage your students to take snapshots before every major step (I have lost hours of time, because of forgetting to snapshot) and teach them what a snapshot is. Snapshots will allow them to do allot of cool stuff in a LAB scenario.

1.  Student installs OS and installs updates. 

2.  Take snapshot A

3.  Install AV 1

4.  Take snapshot B

5.  Test virus's X

6.  Revert to snapshot B

7.  Test Virus Z

8.  Revert to snapshot A

9.  Install AV 2.

Repeat and so on......

Also on the AV front check out cylance, they have a very interesting methodology of catching virus's, really new stuff.

[joshopper]

Peter,

First let me say well done! I would have loved to have my kid in your class and if you need any assistance with this project I would be happy to help you out, send me a private message if you would like a collaborator.

Ryan is correct Horizon view is not the product you want.

I would grab one more server and then purchase VMware vsphere essentials standard - http://store.vmware.com/store/vmware/en_US/pd/productID.282883900

You can build templates for all of the OS you intend to use which will make deployment quick and consistent.

You can probably get an educational price on that and getting vCenter to be able to manage students permissions will be extraordinarily helpful, as well as give you access/insight in to both servers. That will allow you to create pools of resources for each student and that will be limited to what you provide as well as prevent them from crossing over, using or taking resources from other students.

Side notes:

Lab Manager was a great product which would have been a perfect fit but VMware has deprecated it.... too bad it was one of my favorites.