We have had a very weird issue, recently we deployed ips & malware license, I have been informed that there is an issue between bkp server and one of its client, so they removed ips and malware but the problem stil exist noting that there is no logs for some servers on ips event and the other is existed but the drop inline option is not enabled and there is no any drop on the logs, also checking malware and there is no entry at all. Removing ips and malware profilea didn't solve the issue.
So converting policy to trust has solved it, after one day I wanted to re test again, so I changed it to allow with no ips and malware and it worked fine without any issues. But once I chose the ips profile the error returned on bkp server and no any intrusion event related to them also the profile is not inline dropped.
