On 12.1.4.1a, when trying to add exceptions, the program limits us to a 24 bit subnet. We have much much larger subnets.
E.g. to exclude 10.4.0.0 through 10.4.31.255 I would have to specify 32 separate /24 subnets. Trying to enter the parameters I want, the UI comes back with "The starting and ending addresses must be in the same subnet of '255.255.255.0'"
Also, and I know this has been requested in the past - MAC address ranges or wildcards. I don't need SEP to tell me that my Xerox, Cisco, ProCurve, Enterasys, etc. devices aren't managed - reporting on these devices is just noise.