I recommend upgrading to the latest 3.0(1)S4 major version (available as a CD re-image of the sensor or a CCO downloadable upgrade to existing 2.5 sensors), and to the latest signature update 3.0(1)S5 (signature update is installed after 3.0(1)S4 is installed).
Then upgrade you director with the 2.2.2a nrConfigure patch or wait a day or to for the 2.2.3 director upgrade to be available on CCO.
There have been fixes between the versions you are running and these latest versions which allow reconfiguring while IPSEC is in use.