App Control: Unable To Create New Policies Or Modify Existing Policies in CB Protection UI

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Unable to create new policies or modify existing policies in App Control UI.
• Receive "PARITY_SERVER_ERROR" when attempting to add a new policy.
• Receive "Error changing reputation setting: DB Error: String or binary data would be truncated" error when attempting to modify an existing policy.

Environment

• App Control Server: 8.1.4 and Higher

Cause

Character limit of 2048 exceeded in configlist where too many state groups associated with a policy ID in das database.

Resolution

Please contact Technical Support for scripts to scope out unused statefiles, and which can be pruned.

Additional Information

Root cause is an overreliance on various rules/actions per policy (as opposed to applied to all policies) leading to lots of 'states'. There is a limit on how many mappings a policy can have to rules. Even if a policy is removed from a rule in the UI, the state group mapping remains.