I tried to change java.policy file without success.
And I can view java3D applet from other web site, so it is something implemented in EJS which need more security protection.