[9.000][QUESTION] IPS false alarm?

Hello everyone,

downloading this file
http://download.windowsupdate.com/mi...n/wsusscn2.cab
fails because of this (maybe false) IPS alarm:
snort[6340]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-CLIENT CAB SIP authenticode alteration attempt

With v9 beta we experience many more IPS alarms, most of them (as far as I can tell) false.

Can anyone comment on this?

Thanks and cheers!