if one day you had any problem using ISA firewall client (FWC) and tried to do a network sniff between the client and the ISA firewall, but couldn´t check what was going on, because no network sniffer tool could tell you. It´s because there was no parser available for FWC.
To make the system administrator life easier, the Network Monitor and Forefront Edge Core teams wrote a parser specifically for Network Monitor 3.3.
This parser include two new protocols:
· RWS (Remote WinSock): the control channel protocol used between the client and firewall
· WSP (WinSock Proxy): the abstracted application protocol
Now you can understand what happens inside the wires between the ISA firewall and Firewall client. Download it from here.