...
Bypass Two-Factor Authentication
If this option is selected then the logon agent will bypass two-factor authentication if the connection with the DualShield server is lost.
Switch Clients to Offline Logon Mode
If this option is selected then a loss of connection will cause the client to switch to offline logon mode.
Decline All Logon Requests
If this option is selected then a loss of connection will cause all attempts to logon to be rejected whilst the agent is unable to connect to the DualShield server.
...