WSS Agent (WSSA) status shows:
This message means that the network that the WSSA client is egressing from is defined as a "Location" in the Cloud SWG Portal and the WSSA client should go Passive.
In other words, the egress IP of the WSSA client is already defined as known "Location" in the Cloud SWG Portal...and that IP address is already protected by a "fixed location" type of Access Method (i.e., IPsec VPN, Proxy Forwarding, Explicit Proxy).
This is expected behavior when the WSSA client is egressing out via a defined Location.