Endpoint Standard Console: Newly added policy rules not saving

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Newly added rule disappears after the policy is saved
• No errors are presented when saved

Environment

• Carbon Black Cloud Console
  • Endpoint Standard

Cause

The console is consolidating rules as designed

Resolution

This is by design

• If a rule with the same path and action already exists in the policy, the policy will save, but the duplicates are removed.  
  • ex. If rule 'foo.exe performs any action then bypass' exists, creating a new rule with the same action will clear the new rule when saved
• If a new rule is added for a new path, but the action matches an existing rule, the paths will be combined to the same rule section.
  • ex. If rule 'foo.exe performs any action then bypass' exists and another rule for 'bar performs any action then bypass', these will be grouped into one rule with foo.exe and bar.exe on two lines
• If an action already exists for the exact same paths being added for a new action, the policy actions will be grouped together into one.
  • ex. If rule 'foo.exe Runs or is running then Allow' exists, and a new rule for 'foo.exe Scrapes memory of another process then Allow & Log' is added, these will be saved into one rule with both actions. 

Additional Information

These settings will only be applied once "Save" is selected. Confirming any Action settings will still show the items in separate boxes.