You would like to know what happens to the Unified Agent (UA) behavior if it cannot communicate with its configured Client Manager (ProxySG/ASG).
Resolution
All Unified Agents must connect to the licensed Client Manager at least once every 30 days:
If ProxySG/ASG is down, then the UA can continue to work for 30 days as it was previous to the ProxySG/ASG going down.
If after 30 days, the UA still cant communicate with the ProxySG/ASG, the default action is applied from client memory, as specified by the Web Filtering policy on the ProxySG/ASG Management console -> Configuration -> Clients -> Web Filtering -> Policy.
If for whatever reason, the default action is not available, then Unified Agent 4.6.2 and later will “fail open”; that is, all HTTP(S) requests will be allowed until Unified Agent is able to reconnect with the Client Manager.