All keywords in a policy are part of the policy. When Endpoint policies are pushed to the agents, this can cause excessive traffic.
Policies are stored locally on the Endpoint Agents in the ps.ead file. The policy information is sent from the server for several events, outlined in
KB 50839. Every time the policy is pushed out, it is sent to all the agents. If the policy is large, this can cause excessive network traffic.
It is not recommended to use a large number of keywords to replace an EDM on Endpoint. Better to use a Data Identifier where possible.
Imported Document ID: TECH220601
Subscribing will provide email updates when this Article is updated. Login is required.