i've a Kemp reverse proxy behind Zabbix,

i enable x-forwarded-for filed and in Apache where i've zabbix Frontend i can see logs

172.16.200.xx - - [12/Jul/2023:17:36:23 +0200] "GET /zabbix.php?action=dashboard.view&dashboardid=322 HTTP/1.1" 200 875 "10.254.253.xxx""-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0"

if i go under "Reports/Audit log" under my user activity i see always reverse proxy ip 172.16.200.xx and not real ip 10.254.253.xx