ardi_80,
I'm not sure what would be causing this discrepancy.
The first thing I recommend is upgrading to Sawmill for IronPort 7.3. This is the latest build available and has quite a few changes and optimizations to it.
After upgrading, if you are still experiencing the issue, I recommend filing a support ticket to have the specific data looked into further.