Hi Kevin,

I also recommend checking out the .pdf available here: https://www-secure.symantec.com/connect/downloads/sep-sizing-and-scalability-recommendations-v23

Though that white paper is mainly devoted to "Sizing and Scalability Recommendations for Symantec Endpoint Protection" it concludes with an excellent section on Preventing and Correcting False Positive Detections with Symantec Endpoint Protection 12.x.

One excerpt:

Step 1 – Using Digital Signatures

One of the easiest ways to identify that a file is good is to know where it came from and who created it. One of the most important factors in building a positive file reputation is to check its digital signature. Executable files without a digital signature are at risk of being identified as unknown.

• Custom or home grown application should be digitally signed with class three digital certificates

• Customers should insist that their software vendors digitally sign their application

Hope this helps! &: )