Policy setting value of length xxxx is larger than maximum size of 3072 (unable to save Access Protection policies)

Technical Articles ID: KB91938
Last Modified: 2021-12-14 21:25:41 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.x
ePolicy Orchestrator (ePO) 5.10.x
Microsoft Windows Server 2008 R2 and later

Problem

You’re unable to save the Access Protection policies in ePO. The Access Protection policies are grayed out.

The ePO orion.log contains the following error:

2019-07-19 12:02:23,482 ERROR [http-nio-8443-exec-18] servlet.ControllerServlet - Exception thrown by ActionBean:2019-07-19 12:02:23,482 ERROR [http-nio-8443-exec-18] servlet.ControllerServlet - Exception thrown by ActionBean:com.mcafee.epo.core.EpoValidateException: Policy setting value of length 3175 is larger than maximum size of 3072. at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.validateValue(PolicyObjectServiceInternal.java:1947) at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.savePolicySettingValue(PolicyObjectServiceInternal.java:1903) at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.updatePolicySettings(PolicyObjectServiceInternal.java:1610) at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.savePolicySettings(PolicyObjectServiceInternal.java:1425) at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.savePolicyObject(PolicyObjectServiceInternal.java:537) at com.mcafee.epo.policy.services.PolicyObjectServiceInternal.savePolicyObject(PolicyObjectServiceInternal.java:482) at com.mcafee.VirusScan.policies.accessprotection.AccessProtectionActions.SavePolicy(AccessProtectionActions.java:385) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

Cause

The issue occurs if the size of SettingValue for EPOPolicySettingsValueMT in the database exceeds a length of 3072 because of policy changes.

Solution

This behavior is by design. Restricting policy lengths through targeted policy grouping is advised to prevent excessive values. Truncating impacted policies by x characters (where x is the difference between 3072 and the current length value shown in the error in orion.log) allows the policy to be saved.

To submit a new product idea, go to the Enterprise Customer Product Ideas page.

Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website.

For more information about product ideas, see KB60021 - How to submit a Product Idea.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Policy setting value of length xxxx is larger than maximum size of 3072 (unable to save Access Protection policies)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Policy setting value of length xxxx is larger than maximum size of 3072 (unable to save Access Protection policies)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title