ArticlesArticles Most Popular ArticlesMost Popular Articles
RSS Feeds
DrillDown Icon Table of Contents
DrillDown Icon 2019 Official Holidays & Support Schedule
DrillDown Icon IMPORTANT: End of Life of SHA1 on Windows Server 2003
DrillDown Icon IMPORTANT: Supported Operating Systems
DrillDown Icon PLEASE READ: Our Update Server IPs Have Changed
DrillDown Icon Support
DrillDown Icon modusGate for Microsoft Azure
DrillDown Icon modusCloud
DrillDown Icon Alleviating Spam – Best Practices
DrillDown Icon directQuarantine Technical Information
DrillDown Icon modusMail & modusGate Technical Information
DrillDown Icon Documentation & Release Information
DrillDown Icon Known Issues (non-release related)
DrillDown Icon Configuration Information
DrillDown Icon modusGate & modusMail
DrillDown Icon modusGate Only
DrillDown Icon modusMail Only
DrillDown Icon SQL Server Information
DrillDown Icon MySQL Information
DrillDown Icon Security
DrillDown Icon Sieve
DrillDown Icon Spam and False-Positives
DrillDown Icon Statistics and Monitoring Section
DrillDown Icon Web Components
DrillDown Icon How-To: Customize the Quarantine Report Template
DrillDown Icon Info: Modus v4.4.543 Message Audit Log
DrillDown Icon Info: Configuring Norton Internet Security for Webmail Access
DrillDown Icon How-To: Convert WebMail POP Servers to IMAP (v4.3+)
DrillDown Icon How-To: Customize the Date Displayed in Webmail / WebQuarantine
DrillDown Icon Info: Diagnostic Utility for WebMail / WebQuarantine
DrillDown Icon How-To: Configure the Web Components for ModusGate
DrillDown Icon How-To: Configure the Web Settings in the Modus Console
DrillDown Icon How-To: Configure Webmail for Blockade
DrillDown Icon How-To: Configure WebMail for MISP
DrillDown Icon How-To: Configure Windows 2003 for Web Components
DrillDown Icon How-To: Display the Paper Clip Icon
DrillDown Icon Problem: Invalid Class String Errors with WebAdmin or LiveMonitor
DrillDown Icon How-To: Configure and Troubleshoot Modus Web 4.x Components
DrillDown Icon Archive: Web Info - Versions 4.0 & 4.1
DrillDown Icon Safari not supported by Webmonitor
DrillDown Icon Troubleshooting
DrillDown Icon Hardware & OS System Requirements
DrillDown Icon Tools
DrillDown Icon Other Product Technical Information
DrillDown Icon Professional Services
DrillDown Icon Newsletters
  Email This ArticlePrint PreviewPrint Current Article/Category and All Sub-Articles/Categories
 
How-To: Configure the Web Components for ModusGate

 

Product: ModusGate

Version & Build: 4.1.361 & up

 

Background:

This how-to is designed to aid you with:

a) Manual configuration of the web components

or

b) a two server configuration with ModusGate on one machine and the Web components on a separate machine

 
Installation Requirements:

Both IIS and .NET framework version 1.1 must be installed on the server hosting the Web components before the following configuration can be completed. 

NOTE: Version 1.0 of the .NET framework is no longer compatible with our code and should be uninstalled prior to installing the v1.1.

If using Windows Server 2003, please see How-To: Configure Windows 2003 for Web Components before continuing to ensure that the .NET framework has been properly configured on the server.


Manual Configuration of Web Sites:

The following folder structure will automatically be created upon installation of the Web components:

 

WebQuarantine Site Configuration in IIS: Windows 2000 & 2003

  • Open IIS
  • Expand the machine name
  • Right-click Default Web Site and select New > Virtual Directory
  • Alternatively, you could create a new real site
  • Use the wizard & enter the name to be used for the WebQuarantine directory and the directory path:
    • If using the 3.x user interface, the path must point to the location of the Quarantine folder, e.g. ...\Vircom\Web\Quarantine
    • If using the 4.x, the path must point to ...\Web\Quarantine\WebSite 
  • Keep the default settings for the remainder of the wizard panels
  • After the site name is created, right-click on it and select Properties > Configuration
  • Click on App Options (Windows 2000 Server) or Options (Windows Server 2003) and make sure that  Enable parent paths is checked. 
  • Click on Directory Security 
  • Click on Anonymous Access & Authentication Control > Edit and make sure that Integrated Windows Authentication is enabled

 

WebAdmin Site Configuration

Follow the same procedures as above but the directory path will point to the WebAdmin\Root folder, e.g. ...\Vircom\Web\WebAdmin\Root.  Verify that Enable parent paths is checked along with Integrated Windows Authentication.

 

WebMonitor Site Configuration

Follow the above procedure.  The Directory path will point to the WebMonitor folder, e.g. ...\Vircom\Web\Monitor.  Verify that Enable parent paths is checked along with Integrated Windows Authentication.

 

Verify the Configuration Files

Web Quarantine: Webmailsvr.ini configuration file

Locate the webmailsvr.ini file in the ...\Web\Quarantine directory and open it with a text editor.  All connection information is entered automatically during the installation phase>  However, you may need to change some of the entries:

  • The host address must be the first static IP address of the ModusGate server or the first static IP address of the Web server if the web components are installed on a separate machine from ModusGate  
  • The TypeMainInbox will always display MODUSGATE
  • The POP3Server, Imap4Server and SmtpServer addresses all default to the loopback: 127.0.0.1.  These settings do not need to be changed.  The actual IP address used will be that of the ModusGateServer address (below)
  • The DomainName defaults to the Gate server's FQDN name, e.g. machine1.mycompany.com.  It is recommended that you change it to display the actual domain name used in your email addresses, such as mycompany.com.
  • The ModusGateServer address should also display the first static IP address of the ModusGate server or the first static IP of the Web server if the web components are installed on a separate machine from ModusGate 
  • The WebAdminURL path will be "/WebAdmin/" if created as a virtual directory of the Default Web Site, otherwise enter its full URL path.

If any of the above settings must be changed, save the file and stop/restart the Webmail Server Service

  • if everything is installed on one server, you can stop/start the WEBMAILSVR service from the ModusGate administration console
  • if the web components are installed on a separate Web server, the services must be stopped/started using the Windows > Administration Tools > Services panel

NOTE: The connection information in this file is used by both the 3.x and 4.x WebQuarantine interfaces.  If you are using the 4.x UI, see the WebMonitor: WebSite\Custom.config section below for further config info.

 

WebAdmin: Web.config file

Locate the web.config file in the ...\WebAdmin\Root folder.  The site value ( in <add key="Site" value="" />) will be blank, by default, because it assumes that the localhost address will be used.  However, if there are multiple NICs on the ModusGate or Web server, enter the first static IP address to avoid communication problems. 

The Site Directory value of "/WebAdmin"/ (<add key="Site Directory" value="/WebAdmin"/>)applies if it had been created as a virtual directory under the Default Web Site.  If your IIS setup is different, enter the full URL path here.

If any changes are made to this file, stop and start both the WEBMAILSVR service (in the Console) and IISAdmin (run the iisreset command from a command prompt).

 

WebMonitor: WebSite\Custom.config file

The connection information required for the WebMonitor program is located in the Custom.config file, located in ...Web\Quarantine\WebSite. 

If you have multiple NICs on the ModusGate or Web server, replace "localhost" with the first static IP address for the following values: 

  • Site
  • WebMailServerAddress
  • MonitoringServerAddress

Make sure that the Temp and LogDir values point to the correct location of these files within the Web directory.

NOTES:

  1. The custom.config file is used by the 4.x Web Quarantine UI for the MonitoringServerAddress, Temp and LogDir values
  2. If the web components are installed on a separate Web server, the MonitoringServerAddress must point to the first static IP address of the ModusGate server
  3. If any changes are made to this file, stop and start the WEBMAILSVR service (in the Console) and IISAdmin (run the iisreset command from a command prompt)

 

File & Folder Permissions:

The machine's IUSR and ASP.NET accounts must be given Modify rights on the Web Components (replace the ASP.NET account with the Network Service account in Windows 2003), e.g. ...\Vircom\Web.

 

Authentication Request Settings in the ModusGate Console

In order for end users to log into the WebQuarantine program, they must be authenticated against the mail server or authentication server (such as LDAP or Active Directory) to ensure they have a valid email account on the system. 
 
To configure the Web authentication connection, in the ModusGate Console, go to Connections - Properties - General.  Highlight the route and verify or create the configuration for Authentication requests.  This setting is used for all Web component logins (WebQuarantine, WebAdmin and WebMonitor).  Select the authentication method supported by the mail/authentication server, e.g. SMTP_Auth, Exchange 2000+, etc.  The port number appears automatically but can be changed to comply with the network configuration.

The Web component logins require the full email address.  If your mail server/authentication server does not support this type of login, select Strip domain name for authentication requests.  Users will still be required to enter the full email address at the web login screens but only the username portion of the address will be passed to the mail server/authentication server.

 

Testing the WebQuarantine Site:

1. Try accessing the WebQuarantine login screen using either of the following methods:

  • Right-click the site name in IIS and select browse
  • Open a browser window and enter http://localhost/webquarantine or http:// [Gate server's IP]/webquarantine<enter the site name created in IIS>

2. Log in using your email address

Follow the same procedure above to access the WebAdmin and WebMonitor sites.

 

Troubleshooting

If using an SMTP_Auth authentication method in the ModusGate Console, it must be supported and enabled on both the mail server and the firewall (if there is a firewall between the ModusGate and mail servers).  On the firewall, the extended authentication requests (e.g. EHLO) must be allowed.

If SMTP_Auth does not work, try using a POP connection instead, if the mail server supports it.

If using Exchange 2000+ authentication, try using the Global Catalog Port 3268 instead of LDAP's Post 389.

 

Modified 12/20/2006
Keywords: webquarantine webadmin webmonitor
Article ID: 1298