VPN tunnel with Symantec WSS

[vmandala76]

Has anyone configured IPSec tunnel with Symantec WSS (web security service in cloud) on ASA or Firepower?

We need to send ports 80, 443 traffic for destination IP’s 0.0.0.0/0 (i.e. internet) through VPN tunnel to Symantec cloud. Other ports traffic to 0.0.0.0/0 should go directly using the default route to internet ISP. Is this possible?

[davinder2010]

I have also raised a similar problem:

https://community.cisco.com/t5/network-security/cisco-asav-site-to-site-vpn-to-symantec-web-security-service-wss/td-p/4072779

I have a TAC case open with Cisco so hopefully something will get resolved. Symantec Support don't seem to want to help and after a few months had one webex session where they tried to troubleshoot the VPN. No conclusion, advised me to go down the FQDN route then in a separate email suggested i used certificates. Random support!