What happens if an endpoint is offline or not connected to the internet?

EDR and NGAV both keep running normally, and the machine learning model — which runs locally on the endpoint — continues to evaluate files and generate alerts without connectivity.  

Field effect will not be able to cross reference the file with the millions of stored files in the reputation server, however, the local model still delivers a very high degree of confidence.