No. S1 is a SaaS solution and always requires access to the internet. If a machine has a virus/malware, it may be placed in “quarantine” mode depending on the policy applied against a particular set of machines.