Q: Why am I getting CPU 100% alerts every night from the IS?

A:

It's happening because of the tape backups. They produce a lot of traffic. If you don't want to inspect all of this traffic, you can put a bpf (filter) on the detection engine on each IS.