By default, client machines receive notification messages when a threat is detected by Realtime scanning, even though only one of the clients triggered the alert. This policy forwards Realtime alerts to the Alert Manager. You can then disable the Realtime Pop-up Messages option on the Realtime Advanced subtab.
Recommendation: Create a policy to send Realtime alerts to the Alert Manager for more efficient handling.