With 128-bit RAS encryption enabled, you will see one or more event log messages in Event Viewer when RAS users connect using RAS or PPTP. If the RAS client supports 128-bit RAS data encryption, the computer may log this event. See ME172215 for more details.
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.