Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile > Windows Firewall under "Windows Firewall: Define program exceptions"
You can specify the subnet in that policy, just enable the policy, click "Show" and click "Add"