If WSS-Lite is integration by an email address not know to CASB a secondary domain is created in CASB.
This could cause a security concern because the domain will be considered internal.
Activate and integrate CASB-Lite with a internal email address.
Symantec will examine the process and may address this in the future.
The secondary domain can be removed via a support request.