How do I enable debug logging for IPSec?

A. A. Its possible to enable logging for IPSec which will result in logs being written to the %systemroot%\debug\oakley.log by performing the following registry change:

1. Start the registry editor (regedit.exe)
2. Move to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
3. From the Edit menu select New - Key
4. Enter a name of Oakley and click OK
5. Select the Oakley key and select New - DWORD value from the Edit menu
6. Enter a name of EnableLogging
7. Double click the new value and set to 1
8. Close the registry editor

Restart the policy agent

C:\> net stop policyagent
C:\> net start policyagent