The Exceptions Groups pane lets you define exception groups. When necessary, you can create exception groups to use in the Rule Base. An exception group contains one or more defined exceptions. This option facilitates ease-of-use so you do not have to manually define exceptions in multiple rules for commonly required exceptions. You can choose to which rules you want to add exception groups. This means they can be added to some rules and not to others, depending on necessity.
Reference: https://sc1.checkpoint.com/documents/R77/
CP_R77_ThreatPrevention_WebAdmin/82209.htm#o97030

Explanation
SmartConsole
For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star
community in R80 SmartConsole:
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security
Gateway with the static IP address.

Reference:
https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf