Check Point HARMONY R81 Administration Manual page 302

If second update fails - Set a second fallback update source to use if the other
l
sources fail.
Note - If only Update from Local Endpoint Servers is selected, clients that are
disconnected from an Endpoint Security server cannot get updates.
R81 Harmony Endpoint Server Administration Guide | 302
Malware Signature Updates