1) Go to the Anti-Spam Engine > User Policy tab, then search for the users email address


2) Impersonate the user, middle Icon under Actions to the right of the user


3) Once impersonation go to the Filter Rules > User Whitelist tab and remove the entry.