When using an air-gapped system, you will want to disable this setting to improve the UI performance

Air-gapped systems that cannot reach the internet will perform best if access to external networks are prohibited.

In the MFA server's web.config file, change this value to TRUE:

    <!-- SYTEM: If your SurePassID installation prohibits outbound traffic to Internet set this to true. -->
    <add key="Server.ExternalNetworksProhibited" value="FALSE" />  

Change the above to true and save the config.  The SPAS will no longer attempt access any Internet items such as google images and such.  This will affect some UI features but will not impact the operation, but it will improve the performance of the UI.

As always, before you edit the web.config, make sure you have good backups of it.