When the Manager is not reachable, there are no changes to the policies that are previously configured. You can view the polices after the Manager is back online.
The protected groups created in the Manager remains intact. The traffic from the instances are directed to the Sensor for inspection. Also, you can add or delete new instance within the protected subnet but cannot create new protected groups. The Manager database is populated with the instance information once it is back online.