Home > How-to Guides > How to set EPG Tarpit Manager Permissions

How to set EPG Tarpit Manager Permissions

This article applies to the following products:

  • Messageware Exchange Protocol Guard 2019
  • Messageware Exchange Protocol Guard 2016
  • Messageware Exchange Protocol Guard 2013

 


SUMMARY

This article outlines the steps needed to adjust permissions for EPG Tarpit management. Management is controlled by security groups setup in IIS 


SYMPTOM

Administrator cannot release a user from the Tarpit. The "Blocked" checkbox it is greyed-out (disabled) and cannot be unchecked.

 

 
 
 

 

 

 

 

 


TASK

In order to resolve the issue, the tarpit manager must be part of a group that has permissions to enable/disable tarpit in Active Directory and then assign the same group in IIS manager. 


SOLUTION

 Step 1: Make a new security group in AD with tarpit access and add user to that group 

  1. Open Active directory and right click on the server name and select "New", Then Select "Group"
  2. Give a name to the group, in this example it is Tarpit_Security
  3. Select either Global or Universal for group scope 
  4. Select Security in the group type
    •  
  5. Once the group is created, you can do either one of the following:-
    • Add the user to the group  
    • Add the group to the user 
    • In this example we added the user to the group. For that, right click on the new created group select Properties and then select Members 
    • Click Add and select the user that you want to add to the group, once done click Apply and OK 

Step 2: Go to IIS and Navigate to epg-tarpit

  1.  Identify the server where the Messageware EPG Web Management was/is installed 
  2. Open IIS Manager
  3. Navigate to EPG - Tarpit
    • Click on the server name 
    • Then click on Sites 
    • Then click on Default Web Sites 
    • Then click on epg-tarpit
  4. Open Application Settings 
  5. Select TarpitAdmin and Edit (right pane)
    • Update the TarpitAdmin setting to add the appropriate User/Group, in this example it is Tarpit_Security 

Messageware EPG will apply the changes automatically within 5 minutes. Open up the browser with the link  https://<ServerName>/epg-tarpit , replace the servername with your servername that is being utilized for the epg-tarpit.