Yes. Endpoint DLP can continue enforcing configured security policies even when devices are offline, as its endpoint agent operates locally on the device without requiring a continuous internet connection. User activities and security events are logged locally and automatically synchronized with the central management console once the device reconnects to the network. This ensures continuous data protection and visibility into endpoint activities.