Email DLP - Incident reconciliation.

Hello all,

Had a query regarding Email DLP. I have Endpoint Prevent and Network Prevent for Email configured in my environment. Endpoint agent monitors Emails via Outlook and OWA which is working fine. Once the Network Prevent for Email is configured completely, will the mails be monitored twice? Once by endpoint and then by Network Prevent server? And will it trigger duplicate incidents?

I saw something regarding incident reconciliation in Cloud prevent for email guide however the steps are specific to Linux server. Are there any steps for Windows server?