In certain version of SSR, for one single session O365Exchange traffic is recognized as different services on different HA nodes, O365 Exchange on node1, and Internet on node2
This is known issue in certain version of SSR and fixed in version 5.6.11 and later ones. So if incase you are running into consider upgrading to one of recent GA version.