There are several - for Ipsec Cisco VPN Clien look into these
Ipsec phase 1-2 related
Syslog 713120
Syslog 713119
syslog 713049
RA user related
syslog ID: 113015 user authentication Rejected : reason = Invalid password : local database : user =
Syslog: ID 713184 Group = ciscovpn_ra_access, Username = IP = , Client Type: WinNT Client Application Version: 4.8.00.0440
Syslog: ID 113012 AAA user authentication Successful : local database : user = username
You could watch the ASDM real time log and look at the syslog IDs to spot the ones you want or check teh syslog IDs
bellow in the link.
http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/syslog.html
Regards
Jorge Rodriguez
