IPS Packet Capture does not work on Virtual System that was created on Target Domain Management Server because of missing implied rule on the VSX Gateway / VSX Cluster that allows connectivity from the Target Domain Management Server (that manages the Virtual System) to the VSX Gateway / VSX Cluster (that is managed by Main Domain Management Server).