IPS definitions are updating on machines where IPS is disabled by policy

Hello,

I'd like to ask you if this is expected behaviour, that IPS definitions are updating even on machines where IPS has been disabled by policy?

In my company we deploy SEP agent to workstations with full feature set. After deploymen we decide to disable IPS on small group of machines. Since then IPS definitions are still downloading (SEP Manager says so). On some of machines from this group definitions are not up to date - but as far as I understand when IPS is disabled by policy it is not used on affected machine, right?!

Please take a look on screen below:

best regards