Symantec Endpoint Protection (SEP) agent 14.3.RU8 on MacOS ignores the Allow List exception if it detects duplicate entries in the path exceptions.
Following is the use case example:
Above two entries are resolved to the same path, meaning they are exceptions for the same directory. In this case, the agent stops honoring all the exceptions from Allow list policy.
SEP 14.3 RU8
Remove duplicate path exceptions from the Allow List policy for the Mac platform so that all exceptions are effectively honored.