Deadlocks When Performing Bulk File Bans Via API

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Trying to do bulk File Bans via the API bit9platform/v1/fileRule yields deadlocks:

  "Transaction (Process ID <ID>) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction."

Environment

• App Control Server: All Supported Versions

Resolution

Add a delay / sleep timer between the individual file bans.  The amount of delay needed will largely depend on the resources of the server. Start at a 5 second interval and then lower or raise the delay depending on the results.