The event "unknown device event type" occurs when the MARS signature list differes from that of the reporting device. What is the process to update this list on MARS? With routine signature updates for IPS sensors, am I required to wait for an update...

Has anyone else been seeing large occurences of this signature from what appears to be normal web application/browsing activity? No further tuning of the sig has been performed.