CB Protection: Custom Notifier not saving in Advanced Custom Rules
search cancel

CB Protection: Custom Notifier not saving in Advanced Custom Rules

book

Article ID: 285537

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

  • Setting a custom notifier and hitting save, reverts the notifier setting. 
  • Restarting services does not revert settings. 

Environment

  • CB Protection: Server 8.0.x

Cause

This is a known issue identified as as EP-2472 and has been resolved in the 8.1 release. 

Resolution

  • Upgrade to the latest release.
  • If an upgrade is not possible, a manual workaround may be possible using the following steps:
    1. Stop the CB Protection Server, and Reporter services. 
    2. Navigate to C:\Program Files (x86)\Bit9\Parity Console\WebUI\include\Objects\Pages
    3. Edit the CustomRuleDetails.php file. 
    4. Place the following line of code on line 208:
      RulesUtil::setExecNotifierIdFromReq($data, $rule);
    5. Save the file. 
    6. Restart the services. 

Additional Information

The section of code, after change should show:
}else if($operation == 'exec' && $data['execute']){
RulesUtil::setExecuteActionFromId($data['execute'], $rule);
RulesUtil::setExecNotifierIdFromReq($data, $rule);
$rule['writeOpType'] = $defaultRuleFields['writeOpType'];
$rule['writeNegationMask'] = $defaultRuleFields['writeNegationMask'];
$rule['writeActionMask'] = $defaultRuleFields['writeActionMask'];