How to set EPG Tarpit Manager Permissions

This article applies to the following products:

• Messageware Exchange Protocol Guard 2019
• Messageware Exchange Protocol Guard 2016
• Messageware Exchange Protocol Guard 2013

SUMMARY

This article outlines the steps needed to adjust permissions for EPG Tarpit management. Permissions for EPG Tarpit management are controlled by AD Security groups setup in IIS manager.

SYMPTOM

Administrator cannot release a user from the EPG-Tarpit page in the browser. The "Blocked" checkbox is greyed out (disabled) and cannot be unchecked.

TASK

In order to resolve this behavior, the tarpit manager must be part of a group that has permissions to enable/disable tarpit in Active Directory and then assign the same group in IIS manager to grant access. 

SOLUTION

 Step 1: Make a new AD Security Group for tarpit access and add a user that for administration to that group

1. Open Active directory and right click on the server name and select "New", Then Select "Group"
   • 
2. Give a name to the group, in this example it is Tarpit_Security
3. Select either Global or Universal for group scope 
4. Select Security in the group type
   •  
5. Once the group is created, add the user to the group
   •  Right click on the new created group select Properties and then select Members 
   • 
   • Click Add and select the user that you want to add to the group, once done click Apply and OK 

Step 2: Assign AD group to EPG-Tarpit

1.  

   Navigate to EPG Admin > Tarpit > Tarpit Administrator Group > add in the group that was created > click update and save

   

Note: If you are running EPG versions older than EPG 3.7.8, please contact Messageware Support for further assistance