You can remove the produce-alert action from the signature from IDM/IME/CSM or via the CLI:sust-4260-19# conf tsust-4260-19(config)# service signature-definition sig0sust-4260-19(config-sig)# signatures 1306 0sust-4260-19(config-sig-sig)# engine norm...
This is a little bit confusing, but the normalizer in promiscuous mode will still fire alerts for normalizer sigs that have produce-alert set. Sig 1306 has produce-alert set: event-action: produce-alert default: produce-alert|modify-packe...