That sounds like Network Application Monitoring, which is in Clients > [client group] > Policies tab > look under Location-independent Policies and Settings, under Policies, for Network Application Monitoring. You can disable this feature, or change the "Ask" to "Allow and log".
If you are using SEP Small Business Edition (SBE) version 12.1.671, there is a known issue involving Network Application Monitoring being enabled under certain installation conditions, when this feature is not supposed to be available at all for SBE, and you can't configure it under the SEPM's GUI (for details, see http://www.symantec.com/docs/TECH167268). The workaround is to move the clients to a new group that you create. The fix is to migrate to 12.1.1000.
sandra