Endpoint Security 6.x ignoring parts of policy

[obrandt 0]

We're slowly migrating from ERAS 5 to ERAS 6.  I've pushed the 6.1.444 agent and Endpoint Security 6.1.2227 product to some test machines.  All of them are flagging WinZip as a virus or potentially unwanted program even though i have c:\programfiles\winzip* defined in the exclusion list.  I also have a handful of alerts about the OS not being up-to-date even though those machiens are 100% up-to-date with updates and the policy says don't alert on updates.