After Exploit Prevention content is updated, the Application Protection Rules policies are set back to the default configuration. Any previously configured custom rules need to be re-created.