How to set EPG Tarpit Manager Permissions

This article applies to the following products:

• Messageware Exchange Protocol Guard 2019
• Messageware Exchange Protocol Guard 2016
• Messageware Exchange Protocol Guard 2013

SUMMARY

This article outlines the steps needed to adjust permissions for EPG Tarpit management. Permissions for EPG Tarpit management are controlled by AD Security groups setup in IIS manager.

SYMPTOM

Administrator cannot release a user from the EPG-Tarpit page in the browser. The "Blocked" checkbox is greyed out (disabled) and cannot be unchecked.

TASK

In order to resolve this behavior, the tarpit manager must be part of a group that has permissions to enable/disable tarpit in Active Directory and then assign the same group in IIS manager to grant access. 

SOLUTION

 Step 1: Make a new AD Security Group for tarpit access and add a user that for administration to that group

1. Open Active directory and right click on the server name and select "New", Then Select "Group"
   • 
2. Give a name to the group, in this example it is Tarpit_Security
3. Select either Global or Universal for group scope 
4. Select Security in the group type
   •  
5. Once the group is created, add the user to the group
   •  Right click on the new created group select Properties and then select Members 
   • 
   • Click Add and select the user that you want to add to the group, once done click Apply and OK 

Step 2: Assign AD group to EPG-Tarpit

1.  Identify the server where the Messageware EPG Web Management is installed 
2. Open IIS Manager
3. Navigate to EPG - Tarpit
   • Click on the server name > Sites > Default Web Sites > EPG-Tarpit
   • 
4. Open Application Settings 
   • 
5. Select TarpitAdmin and Edit (right pane)
   • Update the TarpitAdmin setting to add the appropriate User/Group. Example: Tarpit_Security 
   • 

Messageware EPG will apply the changes automatically within 5 minutes.

• Reconnect to EPG-Tarpit to verify the change