ES vs Antivirus 100

I am just wondering, what is the core difference between Antivirus and Sangfor ES? Are they the same?

Antivirus is only signature based. If the file is unknown it will allow the traffic. Only the known threats will be blocked. For Sanfor ES, you can have more protection because of its behavioral filtering rather than signature based. Also you will have more visibility and faster remidiation and response.

I am not agree that Antivirus is only signature based, because most of the anti-virus have behavior shield what is mean the anti-virus already know the characteristics of the old core-virus, this old core-virus source code ussually published on underground and BBS/MiRC channel and someone can re-created as a new type virus based of this native virus source-code.

In my experience ES not only anti-virus but its work as network protection and more fetures then antivirus. ES can protect various threats and have firewall features on it. Some of the ES can do more than just firewall features like we know that SANGFOR ES can communicate to NGAF, this will more comprehensive because of the security intelligence for risk analytics and alert, also can identify and block the inbound threats to which network may be vulnerable.

Sangfor Endpoint Secure utilizes a different approach to defending systems from malware and APT threats compared to current next-generation Anti-virus (NGAV) or endpoint detection & response (EDR) solutions.

Sangfor Endpoint Secure utilizes a different approach to defending systems from malware and APT threats compared to current next-generation Anti-virus (NGAV)