PARITY_SERVER_ERROR When Specifying a Policy for Custom Rule, Approval or Ban

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• When attempting to create or modify an existing Policy the status at the top shows the error:

  PARITY_SERVER_ERROR

• When attempting to create or modify an existing Policy, errors are logged similar to:

  Error changing reputation setting: DB Error: String or binary data would be truncated

Environment

• App Control Server: All Supported Versions

Cause

When a Configlist entry (Custom Rule, Approval, Ban, etc) is created and associated with a specific Policy (or Policies) this creates a State Group. There is a character limit of 2048 for these State Group mappings in the das database. Even if a Policy is removed from a Rule, the State Group mapping will remain.

Resolution

Please contact Technical Support for scripts to scope out unused statefiles, and which can be pruned.

Additional Information

Root cause is an overreliance on various rules/actions per policy (as opposed to applied to all policies) leading to lots of 'states'. There is a limit on how many mappings a policy can have to rules. Even if a policy is removed from a rule in the UI, the state group mapping remains.