You have to modify your registry to enable the logging.
Registry Settings: System Key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent\Oakley Value Name: ~EnableLogging Data Type: REG_DWORD (DWORD Value) Value Data: (0 = disabled, 1 = enabled)
Then restart the IPsec service with:
net stop policyagent net start policyagent
More information can be found at the Microsoft website (see the section "Enabling detailed tracing for IKE negotiations").
