Web and Cloud Access Protection (WCAP) is showing "Status: Unknown" with the "Status Message" as "Error: 80010203"

Products

• Endpoint Security
• Endpoint Protection Cloud
• Endpoint Protection
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

End user will see a warning showing that "Web and Cloud Access Protection is not functioning correctly" 

The details will show "Status: Unknown" with the "Status Message" as "Error: 80010203"

Note: WCAP is also known as Network Traffic Redirection (NTR)

Cause

WSS authentication token is misconfigured, missing, or otherwise invalid. 

Resolution

Re-create and re-apply a new WSS token.
See "Procedure—Enable Web and Cloud Access Protection on SEP" here

For SEP clients to securely forward user ID and client-context information to the WSS, you must generate an integration token to be entered in SEP Manager.

1. In the WSS portal, navigate to Connectivity > Symantec Endpoint Protection.
2. Click New Token.
   
3. Verify that Local Device Authentication is selected.
   • (Optional) Enter a Comment to reference the purpose of this token.
4. Click Generate Token. WSS generates the randomized token.
5. Copy or record the Token. There's a copy icon at the end of the field.
6. Click Save.

You will then add this token detail to the SEPM/SES policy. 

For the On-Prem SEPM: 

1. Log in to the Symantec Endpoint Protection Manager.
2. Select Policies > Web and Cloud Access Protection.
3. Double-click Web and Cloud Access Protection Policy. The SEP Manager displays the Web and Cloud Access Protection Policy dialog.
4. On the Overview tab, verify that Enable This Policy is selected.
5. Select Web and Cloud Access Protection.
   
6. Select Enable Web and Cloud Access Protection.
7. From the Redirection Method drop-down, select The appropriate redirection method.
8. In the Network Integration Token field, enter the token that you created in Step 2 .
9. Click OK.