When you updates the bypass lists in the Cloud SWG portal, the list is not in use immediately on WSS Agent.
WSS Agent
Cloud SWG
When new IP's, domains, or applications are added to the Cloud SWG bypass list in the Cloud SWG Portal, the WSS Agent (WSSA) does NOT immediately get the new updated bypass lists.
WSSA checks for bypass list changes roughly every 15 minutes.
If an immediate update of the Bypass Lists is required at the client, then the user can manually click the WSSA "RECONNECT" button in the WSSA tray icon (where you can see the version of WSSA).