...
Bypass Two-Factor Authentication
If this option is selected then the logon agent will bypass two-factor authentication if the connection with the DualShield server is lost.
Switch Clients to Offline Logon Mode
If this option is selected then a loss of connection will cause the client to switch to offline logon mode.
Decline All Logon Requests
If this option is selected then a loss of connection will cause all attempts to logon to be rejected whilst the agent is unable to connect to the DualShield server.
...
Allowed
If this option is selected then, by default, all credential providers are allowed access.
Blocked
If this option is selected then, by default, all credential providers are blacked from access..
...