Mail security for Exchange.

I have a customer who runs mail security for exchange v6.5.2.96 on a Windows 2008 R2 server. When erver they run a manual scan the server logs multiple eventid 4625 logs. It's the Exchange server trying to connect with a login type 3.

Any one seen this kind of activity before.

Thanks

Chris,