see the above screen shot.

John,

Have you put the target server in question into the whitelisted server ?

Go to SEPM

then go to Clients Tab, select the Group, then go to Policies, then at the default location click on the intrusion prevention (edit)

then settings, and click the Excluded host, then add the IP address in there.

hope this helps. 

HI John,

You can add it to the Excluded Hosts list in the IPS policy. 

Setting up a list of excluded computers

http://www.symantec.com/business/support/index?page=content&id=HOWTO27084

Check your Thread

https://www-secure.symantec.com/connect/forums/how-unblock-or-white-list-internal-production-ftp-sep-false-positives

Thanks Ashish for the reminder.

Ashish,

The whitelist trick doesn'ty work :-\ users still comlaint that their legacy application that uses FTP to transfer files into the UNIX server is still blocked by Symantec.

I guess the only way here is to roll back the Symantec AV deployment into 11.0.7 MP3

lately I'm getting busy with various call regarding application malfunction (-_-)" this is mostly due to Symantec Endpoint Protection client v 12.1 RU1 MP1  rolled out to my WIndows XPSP3 users...

just now another call about another 3rd party application using Microsoft Outlook has been crashed, before it was working fine, so I wonder where can I find the log or event in the AV client to see which component did the blocking ?

If this is caused by the IPS, rolling back to RU7 won't matter. The IPS signatures are the same whether it's 11.x or 12.1. You need to either whitelist the IP or disable the signature.

If you can check the logs, this may give a better idea of what's happening.

I'll try by adding the binary file of the application to the white listi.

I'll keep you guys posted.

So confused today (-_-)", the problem still exist, and the user still complaints that the new Symantec Endpoint broke it :-/

I have already upgraded tge client to RU2, but still no effect, the application is still not functioning as it should.

Yes, that is the next step :-/  

because I don't use that legacy application, it would be trickier to install on my WIndows 7 64 bit laptop of mine, because the user is on WIndows XP SP3 32 bit desktop.

Hi John,

Always remember if you don't received any answer please don't waste time and raised support ticket.

Yes for sure, and I will also update this thread with the solution.