I see. If using CSM, you should create different shared policies for DMZs and all other IPS in general. Another common practices is to configured different virtual sensors or simply different signature policies for these exceptions. Hope it helps.Sam