In the Web Console, you can configure global exclusions in the policy properties (Application settings → Trusted zone → Trusted mount points).