For in-depth troubleshooting, the Bastion and Lync Access Control filter can both be configured to record a copy of the traffic. We do not recommend configuring these on a routine basis, as that it would cause a degradation in server performance. Configure these tools only when requested by an Agat support engineer.
...
To configure traffic dumps in the Bastion, make the changes to Bastion.xml. To configure the dumps for any of the filters, make the changes to the appropriate filter xml file, Lync_Access_Control.xml, or EWS_Protector.xml. These files are located in the Filters or Channel subdirectorysubdirectories. If you have more than one channel, ensure that the changes are implemented for each required channel.\