IPS Issue with 17.5 Auto enabling with Sandstorm (Zero-day attack)

Today I was configuring a Sophos 135W with 17.5 Version and IPS is making some issue with Zero-Day Attack(Sandstone). I didn't enable the IPS but in the background, it is auto enabling with Sandstorm.

I can see the all blocked logs under the logs and It is showing none under the Firewall policies.

 

Regards,

Deepak Kumar