Whats happen if Enforce server stop responding, how detection servers operate?
Is they still do work for detection data loss, monitor network trafic acording to configured policy?
When the Enforce server goes offline (for whatever reason), then all of the servers that are connected to it will continue to function normally and incidents will queue locally until Enforce comes back online. Once the Enforce is back online then any incidents collected during the outage will get shipped over to Enforce so you will not miss anything. The only restriction you have on incident collection when Enforce is down is how big the local hard drives are on the monitor servers. Generally you would have to have a long Enforce outside for the monitor servers to fill up their local hard drives but it would be possible if your montior servers aren't sized big enough.