Yesterday when I did the first configuration I used syslog protocol as it was the only port opened on the firewall from those machine.
Today I've reconfigured them to use cfapi and it seems that they get the correct cluster/hosts/datacenter. Tomorrow I'll do some more tests and I'll open a SR if I'm able to replicate the problem with specific information.