If a request is made to download a component through a proxy repository which has the IQ Audit and Quarantine capability enabled and configured for quarantine, then the quarantine status needs to be evaluated before the component is available to the client. If Sonatype IQ Server is offline, then the component will be in a quarantine PENDING state and will behave from the perspective of the client as though the component were quarantined. The Nexus Repository server returns a 403 response to the request for the component while it is in quarantine PENDING.
Once Sonatype IQ Server comes back online, the components which are in PENDING state are evaluated and may be available for client download.
Components containing security vulnerabilities will not be served to clients even when Sonatype IQ Server is offline.