The article provides the information on How to configure logging only for JSC users on the BOX and external syslog server.

Use below configuration to log Juniper Secure Connect user logs such as login, authentication , logout  and IPSEC VPN logs of it.


On-box logging:-

set system syslog file remotevpnlogs any any

set system syslog file remotevpnlogs match "KMD_|REMOTE_ACCESS"

External logging:-

set system syslog host <syslog server IP> any any

set system syslog host <syslog server IP> source <exit interface IP>

set system syslog host <syslog server IP> match "KMD_|REMOTE_ACCESS"


Also refer this document:-  SRX After login to JSC the logs on firewall shows REMOTE_ACCESS_VPN_LOGOUT_OK