⟩ What if the Client Access server role is not available from the Internet?
You can disable redirection for the Client Access server. The Internet-accessible Client Access server will act as an HTTP proxy to the Client Access server that is located in the same site as the user’s mailbox.