These have to be configured initially in the Policies > New Policy > Antimalware > Exclusions section and then can be propagated across all computers in the network which have Endpoint Security installed.