Exclusion List Configuration Lost.

Question

I've noticed that my Endpoint Security and Control v1.1.12 clears exclusions after some time. Is this expected? 
 I would think not and just to make sure that someone is not clicking the "Restore Defaults" button I changed the machine.xml file to Read-Only so that when I recycle the Sophos service the exclusion list will repopulate properly. I do not see any OS Application events, nor anything in the Sophos logs, to explain this behavior. 
 Thank you for any assistance you can provide.

DavidPerez · Accepted Answer

This issue was resolved by support yesterday. 
 I was setting the exclusion list on the individual servers instead of the console. 
 It was surprising that I was able to do this considering that Tamper Protection was enabled on the console. 
 It might be worth considering writing error screens pointing a user to the console or disabling links to features on the servers which are affected by Tamper Protection, such as with the link to Tamper Protection itself on the server, which is ghosted.

Below is a screen capture of the product version as reported on the server: