Logging remote desktop connections

Does anyone know if this is an option?
I have an employee that has been bypassing our firewall by remoting into his home computer. I know how to stop him from doing this, but I want to see how often it occurs first.
Thanks in advance