Symantec Mis-Identifying Port Scan attacks

We have a patch management server that runs a daily discovery service at 8 a.m., and Symantec sees that as a port scan attack. I have put that IP into the exceptions list, but it appears those client machines still see it as an attack. Is there any way to prevent this besides killing the discovery service?