Hi,

Please follow the steps below:

1. Click the Monitors view.
2. Under the Logs tab, change the Log Type to Risk.
3. Click the View Log button to open the Risk Logs page.
4. Select the risk you want to exclude.
5. From the Action drop-down list, select Add Risk to Centralized Exceptions Policy, then click Start.
6. Select the blank policy you created, and click OK.

Aniket

First you find out the checksum value of that file add it to exclutions list
Below doc can help you in this(Actually the doc for for blocking But you can do a small modification and use for allow)
http://service1.symantec.com/SUPPORT/ent-security....

Hi Aniket,

That would just add the path of the current location/machine if you have two hundred machines with 200 users running the file from ten different places I would end up adding one hell of a lot of exclusions for effectively the same file!

Hi Aravind,

It sounds like you're along the right lines (although it's not obvious how to exclude by hash value) however that URL posted doesn't seem to work.  I've done a search in the knowledgebase with no luck so far.

If it's possible to do so, would adding the filename into the Security Risk Exceptions -> Known Risks solve it?

Any further info is appreciated.

Thanks for the replies.

Jim

Refer the discussion

http://www.symantec.com/connect/forums/how-block-applications-sep-using-md5

and the solution of

https://www-secure.symantec.com/connect/forums/ultrasurf#comment-2504141

The above discussions also about blocking a particular file .While creating the policy in the action to be taken you select as allow and try