How to enable or disable tracing for Winsock-enabled programs when you use the ISA Server 2004 Firewall Client

This article explains how to enable or disable tracing for Winsock-enabled programs when you use the Microsoft ISA Server 2004 Firewall Client. You can edit the registry to enable or to disable tracing for all Winsock-enabled programs that are loaded by the Firewall Client Winsock provider DLL file. You can also enable or disable tracing for a specific Winsock-enabled program that is loaded by the Firewall Client Winsock provider DLL file.

This article describes how to enable or disable tracing for Winsock-enabled programs when you use Software Tracing with the Microsoft Internet Security and Acceleration (ISA) Server 2004 Firewall Client program. After you install the ISA Server 2004 Firewall Client program, the Firewall Client Winsock provider DLL file (Fwcwsp.dll) is loaded in the context of every Winsock-enabled program. By default, if you use Software Tracing to perform a trace, the Fwcwsp.dll file will output traces that include every Winsock-enabled program. This behavior occurs regardless of the program that loads the Fwcwsp.dll file.

You may want to use tracing to track down issues with a specific Winsock program. Or, you may want to disable tracing for a noisy Winsock program. To do this, you can override the default behavior of the Fwcwsp.dll file by modifying the following two registry subkeys:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004\Tracing
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004\Tracing\Exceptions

Enable or disable tracing for all programs that load the Fwcwsp.dll file

To enable or to disable tracing for all programs that load the Fwcwsp.dll file, follow these steps.

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following registry subkey:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004
3. On the Edit menu, point to New, and then click Key.
4. Type Tracing as the subkey name, and then press ENTER.
5. Right-click Tracing, point to New, and then click DWORD Value.
6. Type Enabled as the entry name, and then press ENTER.
7. Right-click Enabled, and then click Modify.
8. In the Value data box, type the value that you want, and then click OK.
   • To disable tracing for all programs that load the Fwcwsp.dll file, type a value of 0.
   • To enable tracing for all programs that load the Fwcwsp.dll file, type a value of 1.
9. Quit Registry Editor.

Enable or disable tracing for a specific program that loads the Fwcwsp.dll file

You can enable or disable tracing for a specific program that loads the Fwcwsp.dll file by modifying the registry subkey. The value of the entries that you configure under the subkey override the value of the Enabled registry entry under the subkey. For example, if you only want to enable tracing for one specific Winsock-enabled program, you can set the value of the Enabled entry to zero (0), and then use the subkey to enable tracing for the specific program that you want. To configure the registry subkey, follow these steps.

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following registry subkey:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004\Tracing
3. On the Edit menu, point to New, and then click Key.
4. Type Exceptions as the subkey name, and then press ENTER.
5. Right-click Exceptions, point to New, and then click DWORD Value.
6. Type Program.exe as the entry name, where Program is the name of the executable file for the specific program that you want to configure tracing for, and then press ENTER. You must include the .exe file name extension. You do not have to specify the path of the Program.exe file.
7. Right-click Program.exe, and then click Modify.
8. In the Value data box, type the value that you want, and then click OK.
   • To disable tracing for a specific program, type a value of 0.
   • To enable tracing for the specific program, type a value of 1.
9. Repeat steps 5 through 8 for each program that you want to configure tracing for.
10. Quit Registry Editor.