If you want to disable cloud-based scans, you can do so from the administration console. Go to Settings > Profiles > Windows and Linux > Advanced settings > Disable scans with Collective Intelligence.
However, it is advisable to keep this option enabled if you want to benefit from all the protection provided by Collective Intelligence.
Endpoint Protection accesses the cloud in the following scan types:
Any type of scan launched from the bear icon in the notifications area, or by right-clicking an item and selecting the Scan option.
Any type of scan launched from the Endpoint Protection Web console.
Scans scheduled by Panda whose aim is to scan areas of the computer where malware is usually stored.
This scan takes place every time the signature files are updated.
Everything that exists in memory will be scanned using the cache knowledge so as not to launch queries to the cloud for files that have already been scanned.
A scan monitoring mechanism has been implemented to prevent scans from overlapping: If a memory scan is running, a new one will not be launched.