I'm not sure I understand the first question...normal communications are established using "normal routing" via a default gateway from the sensor. The sensor(probe) can be configured to report to multiple directors if you want redundancy, but it still has one network connection. [the sensor has one network interface for the monitored network and one network interface for command & control. Our standard recommendation is to run C&C on a network separate from the monitored network eg. out of band]
As for the lost contact question, the answer is yes. Alarms will be logged on the local system until contact is re-established, at which time they will be forwarded to the director.
