You would want to use the rule to 'Always Allow'. From what you're describing I'm not certain if just adding the AV exceptions will be enough to help, but it's worth a shot.
I found these articles that could be helpful, but it looks like the exceptions on hyper-v are mostly for the main server rather than the VMs.
Hopefully that helps out.
Is there anyway to schedule when the virus definitions are downloaded to a machine?