Endpoint Protection

I have applied the firewall policy on group where i want but i need to add 4-5 user in exception of policy so thats policy not applied on that users, any suggestion?

You can move that clients in different group where this policy not be applied.

You need to move that user in different group

You can see this thread also

http://www.symantec.com/connect/forums/need-help-sepm-firewall-policies-single-clients

No, i don't want to move these users on different group. I applied the exception for these clients in same group.

You can check below thread and mithun comments

You can see this thread also

http://www.symantec.com/connect/forums/need-help-sepm-firewall-policies-single-clients

Check if help

https://www-secure.symantec.com/connect/forums/how-add-more-two-location-based-settings-firewall-policy-newly-created-group

In SEPM , Policies are applied to Groups.

Groups can have users or computers , but policies always to groups. Not to individual users /machines

No two policies can be applied to same group ( ex, 2 Av policy, 2 FW policy)

Create a new group move 4 - 5 users to different group, Do not apply the policy. Thats the only way.

Policies are applied to groups so groups cannot have two different policies for the same component.

For what you want to do, create a separate group and move those PCs into it. That's your only option.

Create a separate group. Move the clients on that group. Don't applied the firewall policy.