Out of curiosity, what version of DSM are you running?  I'm still on 9.6.  I may be at the point of spinning up a new Deep Security manager on 10 to test with given the lack of responsiveness from Trend Micro support.