In the event that the DualShield MFA server is down, you have 3 options
These options are located in the DualShield Windows Logon Manager:

To exempt MFA from Windows Logon in the event that the DualShield MFA server is down, select the option "Bypass two-factor authentication"