Getting Intrution Prevention detection "[SID: 21960] MSRPC Spooler GetPrinterData DoS detected" on Windows 7 client using SEP 11.0.5002.333. I found this discussion saying to go to:
Policies> Intrusion Prevention Policies> Exceptions> Add...
browse to exception ID 21960 (same as in the error).
I don't see where I can add an exception to Intrusion Prevention or select an exception ID. Will Symantec be updating signatures to prevent these false positives?