Shadow copy

Hello,

if I enable the Shadow Copy of files on our DLP 12.5.2 agents, do they push the files directly on the Enforce or will they push it to the Endpoint Server first, and the Endpoint Server to the Enforce after ?

Which Protocol/port is then used for this file copy ?

Thanks in advance for your help.

Regards