Endpoint Protection

Is there a way to get a report for WHO allowed a download that Insight had bocked?  I can get a report of what was allowed, bug that is about it.  If I could at least get a system name, that would be helpful, but from what I have seen, all I can get is a list of what was allowed.

Here is a snip of the report I get:

You can run the Risk log (alert) and it will show but it won't show in the actual report

You are right, it does not show up that bit... to find out where the risk originated in your environment enable risk tracer

http://www.symantec.com/business/support/index?page=content&id=TECH102539