In the Cisco FlexConnect state known as "Authentication-Down / Switch-Local," new users are rejected, but existing authenticated users continue to be switched locally until their session times out. This state ensures that the WLAN continues to beacon and respond to probes, maintaining connectivity for existing users even when the branch location loses connectivity to the controller