Certain server roles have very specific requirements for AV scanning and Firewall configuration - Active Directory Domain Controllers, Microsoft Exchange servers, and Microsoft SQL servers are prime examples.
Some of these requirements are built directly into SEP (automatic exclusions of Exchange mailbox stores when a SEP client is installed on an Exchange server, as one example); however, it is important to always confirm the current requirements to assure no changes have occurred in the AV scanning or network communication requirements that may be overlooked. The References section of this document contains links to Symantec documentation on AV, IPS and Firewall policies documentation. If you have questions about the SEP policies and how they work, please refer to your SEP Administrator's Guide or contact your authorized Symantec Support center for assistance.
copied from this link
http://www.symantec.com/business/support/index?page=content&id=TECH92440