Enabling Debug Logging for the Common Firewall Driver on Windows Server 2008/7/Server 2012/8/8.1/10/Server 2016 Computers

  1. Modify the following registry values:

    Registry Key

    Values

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tmwfp\Parameters

    Type: DWORD value (REG_DWORD)

    Name: DebugCtrl

    Value: 0x00001111

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tmlwf\Parameters

    Type: DWORD value (REG_DWORD)

    Name: DebugCtrl

    Value: 0x00001111

  2. Restart the endpoint.
  3. Check wfp_log.txt and lwf_log.txt in C:\.