End user will see a warning showing that "Web and Cloud Access Protection is not functioning correctly"
The details will show "Status: Unknown" with the "Status Message" as "Error: 80010203"
Note: WCAP is also known as Network Traffic Redirection (NTR)
WSS authentication token is misconfigured, missing, or otherwise invalid.
Re-create and re-apply a new WSS token.
See "Procedure—Enable Web and Cloud Access Protection on SEP" here
For SEP clients to securely forward user ID and client-context information to the WSS, you must generate an integration token to be entered in SEP Manager.
You will then add this token detail to the SEPM/SES policy.
For the On-Prem SEPM: