i've noticed a mismatch in between the configuartion of the cisco IOS IPS through the CLI and the results shown by the cisco SDM v2.5. On my cisco 1841 i've enabled/unretired some signature categories such as Adware/Spyware and Viruses/Worms/Trojans which look as expected from the CLI. When i connect trough the cisco SDM, on the Firewall section, lots of the previously enabled/unretired signatures look disabled/retired. If i re-enable/re-unretire them from the GUI the total amount of unretired signatures shown by the CLI doesn't change.
thanks for your help