After i've already upgrade NSM version from 6 to 7 in my customer but alert in RTTA not showing entirely.
So, i create NSM 6 & NSM 7 in lab with same sensor M-2850 & policy default inline IPS.
I've already reproduced attack with metasploit, p2p teamviewer, gtalk, ym.
In NSM 6, RTTA showing alert more than NSM 7.
Why alert are showing differently?