We're still running 1.7.0 (partially because I can't backup the config).
Running "update dpi signatures" returns "No new signatures available".
I'll try and see whether I can setup that DPI filter or not. It might still help, since Defender updates seem to be marked as Windows Update and can clog the network as well.