Hi Xa Xiong,
Usually non applicable patches should not come to your PCs, nothing special needs to be configured.
In order to help us investigate the issue, could you please give more details, which exact patches are failing?
Could you please provide the STPatchAssessment XML and Log, which can be found on client at path C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{6D417916-467C-46A7-A870-6D86D9345B61}\cache.
Also, Symantec Management Agent log would be very helpful: C:\ProgramData\Symantec\Symantec Agent\Logs
Thanks,
Sergei