You have configured Excluded Hosts in the IPS policy on Symantec Endpoint Protection Manager (SEPM).
After deploying the Symantec Endpoint Protection (SEP) 12.1 RU4 Mac client to the systems, it is noticed that Excluded Hosts were not excluded correctly.
Criteria used for Excluded Hosts is not an IP address/range/subnet.
This is as designed.
SEP for Mac does support Excluded Hosts for IP addresses (including IP range and subnet). However, it does not support MAC addresses, hostnames or domain names.
Symantec Endpoint Protection (SEP) 12.1 RU4 for Mac .