Application Visibility and Control (AVC) lets a next-generation firewall identify traffic by examining packet attributes and contents, not only source, destination, and port information. section 11.5.2
AVC extends stateful packet filtering by recognizing applications within network traffic. Its inspection role is similar to Network-Based Application Recognition (NBAR), while the surrounding NGFW can also integrate malware protection and intrusion prevention. section 11.5.2 section 11.6
