Reference: Web Security Service Data Center Ingress IPs

Fixed-location Access Methods require you to enter IP addresses of the nearest Web Security Service datacenter(s).

You also must add these IP addresses plus the Web Security Service portal to your firewall's allowed outbound rules.

The Symantec Operations team maintains the following Knowledge Base article.