The default settings for the IPS Sig 3030 TCP SYN Sweep on same Dest Port will fire with a destination port of 0. I would recommended tuning the IPS signature on the sensor itself to start displaying the destination port before you start tuning out ...

Sounds like it may be related to the following field notice.http://www.cisco.com/en/US/products/ps6241/products_field_notice09186a00807116b4.shtml

There is no way to get the configs off the MARS without going through the archive process. If you are concerned about losing the devices that you have listed in MARS, I would recommend building a seed file that you could use to quickly reimport the ...