SEP MAC Client and Intrusion Prevention Excluded Hosts

Hello,

is there a way to make an exclude for let's say Nessus in the SEP MAC Intrusion Prevention policy? Adding a host in the 'Excluded Hosts' does not seem to have any effect with MAC clients (can see blocked content in the logs). With a Windows client the 'Excluded Hosts' work as wanted so it is defnitely a problem with the MAC.