You should be carefull while excluding folders
Users can see what folders are excluded from the SEP client console ( you should disable this option)
once excluded the folder can be used to download any malicious software as it wont be scanned.
Better to exclude just the file rather than the entire folder.