Despite configuring "Action: Allow" exceptions for several Intrusion Protection System (IPS) signatures (for example: SID 32939, SID 32940, SID 30369, SID 30226), Security Alert Notifications still getting delivered to Symantec Endpoint Protection clients.
Issue fixed with CIDS 17.2.9 engine release (GA: September 26, 2022). This fix was made available via a simple engine update via LiveUpdate.