Network contains high saturation between SEPM and clients

Hello

I have problem with my SEPM server where is console.

Every day between 2:00 AM and 5:00 AM I observer many downloads between clients and SEPM server. Sometimes load equal around 9 GB.

I check eventlog, policy but still not find issue.

Please help me find what setting what cause this high saturation.