DebugView is an application that lets you monitor debug output on your local system, or any computer on the network that you can reach via TCP/IP. It is capable of displaying both kernel-mode and Win32 debug output, so you don't need a debugger to catch the debug output your applications or device drivers generate, nor do you need to modify your applications or drivers to use non-standard debug output APIs.
This tool really helps in case of understanding the traffic flow, troubleshooting issue related to specific application not working when SASE client is connected.
Please follow below procedure to take VSA driver logs:
1. Download DebugView tool from “ DebugView - Sysinternals | Microsoft Learn”
https://learn.microsoft.com/en-us/sysinternals/downloads/debugview
2. Extract it and run DebugView.exe with admin privilege.
3. Enable the flags as per below snapshot:
4. Add below Edit -> filter/Highlight.Post that VSA driver logs will be shown on console.
5. Then Reproduce the issue, afterwards save the log as below
We can use these kernel/driver logs along with the PCAP taken on client to identify whether any application traffic is being blocked by VSA or not.