Exclude applications - file vs. application exception

Hi there,

I've created my exceptions for applications (.exe) based on File Exceptions. Our environment is running SEP 12.1.6 RU6 MP4.

Now I'm asking myself if this correct. Does SEP Client ignore running applications based on File Exceptions e. g. notepad.exe? Or is it necessary to create specific application exceptions?

My problem with application exceptions: Once a file has been changed during an Update the file hash would change, so my application exception doesn't work anymore and I need to start from scratch. This doesn't feel very convenient in large environments.

I'm assuming it's working with File Exceptions, because I can specify if subordinated processes should be excluded as well. But I'm not sure at all. I checked the Admin Guide, but it doesn't clarify this for me.

Thanks for clarifying.

Cheers,

S-L