ZyWALL logs all VPN events. These protocols can be viewed in the "Monitor > Log" menu. For phase 1 events, select IKE as the display filter, and IPSec for phase 2.