Exchange 2010 SP3 UR9 on-premise. I have enabled mailbox audit logging per https://technet.microsoft.com/en-us/library/ff459237(v=exchg.141).aspx on a few mailboxes. For all entries, Search-MailboxAuditLog comes back showing ClientIPAddress as my CAS array instead of the IP of the user's PC.
Am I missing something or is this just the way it works? Thanks. Richard Osborne Information Systems Jackson-Madison County General Hospital NOTICE: (1) The foregoing is not intended to be a legally binding or legally effective electronic signature. (2) This message may contain legally privileged or confidential information. If you are not the intended recipient of this message, please so notify me, disregard the foregoing message, and delete the message immediately. I apologize for any inconvenience this may have caused.
