Another easy way is to learn how to write snort rules. more over you can have both Anomaly and vulnerability detection on NGIPS using correlation rules. add to this the ability to correlate signatures to actual vulnerability on the targeted system will reduce time to protection window.