Sei sulla pagina 1di 9

ISA Server 2004 Tools: FwcTool.

exe Overview
FwcTool.exe provides a set of command-line tools to help you configure, manage, and troubleshoot Firewall Client issues in Microsoft Internet Security and Acceleration (ISA) Server 2004 Enterprise Edition and ISA Server 2004 Standard Edition. Note that FwcTool.exe cannot be used with Firewall Client for ISA Server 2000. Instead, ISA Server 2000 provides Chkwsp32.exe on the ISA Server CD. For more information about Chkwsp32.exe, see article 284523, "How to Use Chkwsp32.exe for Winsock Proxy Clients and ISA Server Firewall Clients," in the Microsoft Knowledge Base. When using FwcTool.exe on a computer running Firewall Client for ISA Server 2004, you can view and manage Firewall Client settings for the following configurations: User settings. For a particular user, settings are stored in \Documents and Settings\username\Local Settings\Application Data\Microsoft\Firewall Client 2004. All Users settings. Settings that are global and apply to all users are stored in Documents and Settings\All Users\Application Data\Microsoft\Firewall Client 2004. Application settings. Settings can be configured for specific Winsock applications. These settings are stored in Application.ini.

During Firewall Client installation, settings specified are applied to all users. After Setup is complete, any settings you specify in the Firewall Client console are configured only for the current user. To set configuration settings for all users after installation, you can either manipulate the Firewall Client files in the All Users folder manually, or use FwcTool.exe to specify settings.

Running FwcTool.exe
To run the tool, open a Command Prompt window and type fwctool.exe. The following table shows the available commands.

ISA Server 2004 Tools: FwcTool.exe

Command SetManualServer

Description Specifies the name of the server to which the Firewall client should connect. You can use SetManualServer to specify an ISA Server computer for all users, the current user, or for a particular application. Setting this value disables automatic detection. Enables automatic detection for Firewall clients. You can enable automatic detection for all users, the current user, or for a particular application. Any ISA Server computer currently configured in the Firewall Client dialog box will remain, but will not be used. Enables or disables Firewall Client on the computer for all users, the current user, or for a particular application.

Firewall Client dialog box equivalent Select Manually select ISA Server in the Firewall Client dialog box, and enter a server name.

SetAutodetectServer

Select Automatically detect ISA Server in the Firewall Client dialog box.

Enable/Disable

Select or clear Enable Microsoft Firewall Client for ISA Server 2004 in the Firewall Client dialog box.

PingServer

Verifies whether the ISA None. Server computer specified is available. This command triggers communication across the firewall control channel on port 1745. No settings are updated on the Firewall client computer as a result of the ping. Tests the automatic detection mechanism. This command checks whether a Web Proxy None.

TestAutoDetect

Command Syntax and Examples

Command

Description Automatic Discovery (WPAD) entry is available in Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), or both.

Firewall Client dialog box equivalent

EnableBrowserConfig/Di Specifies whether sableBrowserConfig Firewall Client should configure the Web browser settings on the Firewall client computer. You can specify this for the current user, or for all users. PrintBrowserConfig Prints the Web browser configuration settings on the Firewall client computer for the current user, or for all users. Prints the current configuration settings provided to the Firewall Client Winsock provider running in the context of a particular application, for the current user, or for all users. Printed settings include an indication of whether the Firewall Client is enabled, and if a server is detected. Prints server settings for the server specified in the Firewall Client dialog box. Use the /f switch to specify that Firewall Client settings from the server should be refreshed. Prints Firewall Client settings on the local

Select or clear Enable Web Browser automatic configuration in the Web Browser tab of the Firewall Client dialog box.

None.

PrintConfig

None.

PrintServerConfig

None.

PrintUserConfig

None.

ISA Server 2004 Tools: FwcTool.exe

Command

Description computer for the current user.

Firewall Client dialog box equivalent

PrintGlobalConfig

Prints Firewall Client settings on the local computer for all users. Prints general information about the Firewall Client installation.

None.

Info

None.

Command Syntax and Examples


The following sections show the command syntax and examples for the FwcTool.exe commands. For information about formatting, see the Formatting Legend section later in this document.

SetManualServer
Syntax FwcTool SetManualServer [/g] [/app: appname] [/server: servername] Parameters /g. Optional. Sets the ISA Server computer globally for all Firewall Client users on the computer. This will not override specific user settings. If this value is not specified, the server specified is configured for the current user only. /app: appname. Optional. Sets the application name (without the .exe extension). If specified, only that particular application is affected by the changes. /server: servername. Optional. Specifies the name or IP address of the ISA Server computer. If SetManualServer is used without specifying a server name, automatic detection is disabled, and the ISA Server computer currently specified in the Firewall Client dialog box is used. Examples To specify that the current user should use the ISA Server computer specified in the Firewall Client dialog box: FwcTool SetManualServer To specify an ISA Server computer for all Firewall Client users:

Command Syntax and Examples

FwcTool SetManualServer /g /server: myserver FwcTool SetManualServer /g /app: iexplore /server: myserver

To specify an ISA Server computer that all users of Internet Explorer should use:

SetAutodetectServer
Syntax FwcTool SetAutodetectServer [/g] [/app: appname] Parameters /g. Optional. Enables automatic discovery of the ISA Server computer globally, for all Firewall client users. This will not override specific user settings. If this value is not specified, automatic discovery is configured for the current user only. /app: appname. Optional. Sets the application name (without the .exe extension). If specified, enables automatic discovery of the ISA Server computer for the specific application only. Examples To enable automatic discovery for the current user for all applications: FwcTool SetAutodetectServer FwcTool SetAutodetectServer /g FwcTool SetAutodetectServer /g /app: iexplore To enable automatic discovery for all Firewall Client users: To enable automatic discovery for all users of Internet Explorer:

Enable/Disable
Syntax FwcTool Enable [/g] [/app: appname] FwcTool Disable [/g] [/app: appname] Parameters /g. Optional. Enables or disables the Firewall Client application globally, for all users on the computer. This will not override specific user settings, which always take precedence. If this value is not specified, Firewall Client discovery is enabled or disabled for the current user only. /app: appname. Optional. Sets the application name (without the .exe extension). Enables or disables Firewall Client for specific applications only. Examples

ISA Server 2004 Tools: FwcTool.exe

To enable Firewall Client for the current user for all applications: FwcTool Enable FwcTool Disable /g FwcTool Enable /g /app: iexplore To disable Firewall Client for all users: To enable automatic discovery for all users of Internet Explorer on the Firewall client computer:

PingServer
Syntax FwcTool PingServer ServerName Parameter ServerName. Specifies the name of the server to be contacted. Example FwcTool PingServer myserver

TestAutoDetect
Syntax FwcTool TestAutoDetect [/type: DHCP|DNS] Parameters /type: DHCP|DNS. Optional. Specifies that the DNS entry or the DHCP option 252 (WPAD) should be checked for the WPAD entry that will be used to send Winsock Proxy Autodetect (WSPAD) information to the client computer. If you do not specify /type, both DNS and DHCP will be checked in this order: first, DHCP is checked, and then DNS is checked. In this case, if WPAD information is found in DHCP, DNS will not be checked. Examples To check DHCP and then DNS (if no DHCP entry is located): FwcTool TestAutoDetect FwcTool TestAutoDetect /type: DHCP FwcTool TestAutoDetect /type: DNS To check DHCP: To check DNS:

Command Syntax and Examples

EnableBrowserConfig/DisableBrowse rConfig
Syntax FwcTool EnableBrowserConfig [/g] FwcTool DisableBrowserConfig [/g] Parameter /g. Optional. Specifies that Web browser configuration settings should be set globally (for all users), by Firewall Client. Otherwise, Web browser configuration settings are set by Firewall Client for the current user only. Examples To configure Web browser settings to be set by Firewall Client for the current user only: FwcTool EnableBrowserConfig FwcTool DisableBrowserConfig /g To specify that Web browser settings should not be configured by Firewall Client for any user:

PrintBrowserConfig
Syntax FwcTool PrintBrowserConfig [/g] Parameter /g. Optional. Specifies that Web browser configuration settings should be printed globally, for all users. If not specified, Web browser configuration settings will be printed for the current user. Examples To specify that Web browser settings should be printed for the current user only: FwcTool PrintBrowserConfig FwcTool PrintBrowserConfig /g To specify that Web browser settings should be printed for all users:

PrintConfig
Syntax FwcTool PrintConfig [/g] [/app: appname] Parameters

ISA Server 2004 Tools: FwcTool.exe

/g. Optional. Specifies that current configuration settings for all users should be printed. If not specified, configuration settings for the current user will be printed. /app: appname. Optional. Prints the current configuration settings for a particular application. Examples To print the current settings for the current user: FwcTool PrintConfig FwcTool PrintConfig /app: iexplore FwcTool PrintConfig /g /app: iexplore To print the current settings for Internet Explorer: To print the current settings for all users of Internal Explorer:

PrintServerConfig
Syntax FwcTool PrintServerConfig [/f] [/server: servername] Parameters /f. Optional. Indicates that if the server name specified matches that displayed in the Firewall Client dialog box, a refresh should be forced to update Firewall Client settings from the server. /server: servername. Optional. Specifies the name or the IP address of the ISA Server computer for which settings should be displayed. If not specified, settings are printed for the ISA Server computer currently specified in the Firewall Client dialog box. Examples To print settings for the current server: FwcTool PrintServerConfig To print settings for the current server and force a refresh of Firewall Client settings from the server: Fwctool PrintServerConfig /f FwcTool PrintServerConfig /server: myserver To print the server settings for a different server:

PrintUserConfig
Syntax FwcTool PrintUserConfig

Command Syntax and Examples

Prints local settings for the current user.

PrintGlobalConfig
Syntax FwcTool PrintAllUsersConfig Prints local settings for all users.

Info
Syntax FwcTool Info Prints installation information for the Firewall Client. Includes: Registry location information for Firewall Client Installation path for Firewall Client Firewall Client files (.exe and .dll)

Formatting Legend
The following table provides information about formatting.
Format Italic Bold Between brackets ([]) Between brackets ([]); choices separated by pipe (|). Example: [even|odd] Meaning Information that the user must supply. Elements that the user must type exactly as shown. Optional items. Set of choices from which the user must choose only one.

Potrebbero piacerti anche