When State-of-the-art classification is turned on, content is distributed with the local system towards the cloud expert services for scanning and classification. If bandwidth use is a priority, you'll be able to set a limit on how much bandwidth can be utilized in a very rolling 24-hour interval. The Restrict is configured in Endpoint DLP settings