[lammbo]

Edit: I missed where you specified 'Audit' log before I posted. I had an issue with logs in general so disregard if this is not your situation.

I had this issue years ago also when going from NG R55p to NGX R60. In my case (and a few others I've seen posted here) the issue was with NAT between the gateways and the SCS (as in CP Auto-NAT). It has to do with what addresses are listed as Primary in SCS (public vs private). I ended up creating another CP object and defining it as a log server only.

If your issue turns out to be NAT, there are other ways to do this and I recall seeing this subject before on these forums. If I'm not mistaken, someone even quoted a KB article, if you search a little, you should find it.