When Broadcom Technical Support requests to gather the capture of in-tunnel traffic on Symantec Diagnostic Tool (SymDiag).
Follow the procedure in this Article.
Cloud Secure Web Gateway
WSS Agent 7.2.1 or later
Take a look at SymDiag Application for the whole steps and procedure
You need to select the WSS service on Debug Logging option on Symantec Diagnostic Tool on the procedure. This turns on the capture of in-tunnel traffic to a pcap file.
While a pcap is in process, there is an indicator on the WSSA Status tab which reads "In-Tunnel PCAP in progress...".
Once the file is saved. You can use SymDiag Viewer for Windows to extract information such as:
The capture of in-tunnel traffic feature is available on WSSA 7.2.1 or later