Dark Reading has an new article yesterday based around a (non public, not free) report from NSS labs.  Apparently the report says that intrusion prevention systems need tuning.