Old Legacy software blocked by the SEP 12.1 RU1 MP1

Hi,

Some of my users in the office complained to me again becaus of this SEP 12.1 deployment, the most common now when it is working is:

SID 20903:  FTP generic command overflow detected

How can I make sure that this attack is put into the white list as this is happening between the internal server and the workstation in the office.

Thanks