After an older bug i reported with IPS and SSH (see https://community.sophos.com/products/unified-threat-management/astaroorg/f/98/t/67757) the problem seems to be returned in an other way.
Connections to a SSH server are blocked, but not logged by IPS. As soon i disable IPS it works again. Unfortunately not found more informations about the problem yet.
Pattern version: 10020
