Currently, just adding the CASB Audit license permitted the use of application names in policies. An upcoming WSS release (currently scheduled for the Fall) will provide the following CASB changes:
To integrate with the CloudSOC service, refer to the following documentation topic.
http://portal.threatpulse.com/docs/sol/Solutions/ManageWebApps/CASB/casb_audit.htm
If you have a valid CASB Audit but do not perform the integration before the service update, existing rules that contain the CASB names will no longer match.
Symantec will continue to communicate this issue, including more information as to when this service update will occur.