For the SWS Agent
With the SWS Agent configuration, the process name is all that is required (no path needed).
For SEP 12.0 and older, the pre-defined NO_ACCESS_PROCESSES list (found in AppstreamCfg.txt) is sufficient.
For SEP 12.1 and higher, ccSvcHst.exe must be manually added to the NO_ACCESS_PROCESSES list.
For the SWV Agent
For SEP 12.0 and older, the pre-define ProgramIgnoreList (located under HKLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL). If SEP is installed to a non-default location, the path in the ProgramIgnoreList needs to be changed accordingly.
Beginning with SEP 12.1, the ProgramIgnoreList must include a path of the following form:
c:\Program Files\Symantec\Symantec Endpoint Protection\12.1.671.4972.105\Bin\ccSvcHst.exe
Once again, if SEP is installed to a non-default location, the ProgramIgnoreList will need to be changed accordingly.
Also, since the program path now contains a build number that will change with each release (including hotfix, RU, MP, etc.), the ProgramIgnoreList must currently be updated each time SEP is updated.