After upgrading the SES agent, the Cloud SWG redirection (WSS) policy shows as disabled on the local SES (Symantec Enterprise Security) client. The policy assigned to the clients for WSS is enabled.
To resolve this issue, restart the SES Client service.
This article covers how to do this. It can either be done manually, or a script can run the commands:
https://knowledge.broadcom.com/external/article/151294/how-to-manually-stop-and-start-the-syman.html