Omitting an exception for a specific group

Hello Eduardo,

Thank you for contacting the Sophos Community.

The exceptions are applied globally, however, within the exception, you can specify the Source-IP address of the devices that this exception will apply for. 
For example, if I have two Networks 10.10.10.0/24 and 10.10.11.0/24 and I only want this exception to apply to IPs coming from 10.10.11.0/24 I would add this network in the Source-IP address within the exceptions.

Regards,

Ok, thanks. Instead of the source-IP that this exception will apply for, can I choose the the source-IP that this exception will not apply for?

When I try to find an IP Host Group, in the exception's source IP address, nothing appears. Where should I add this IP Addresses so I can search them in the exception's source IP address field?

When I try to find an IP Host Group, in the exception's source IP address, nothing appears. Where should I add this IP Addresses so I can search them in the exception's source IP address field?

Or can I choose an IP Range and then add it to this field? It would be better for me.