CES is Cloud Email Security. Basically a set of Email Security Appliances in the cloud for your dedicated use.
CAPP is actually an Agari product resold by Cisco, currently implemented by flowing mail to the Agari solution. Eventually it will be integrated on the ESA, but I dont know the timing.
They are complimentary solutions, but CES covers the basics. Get CAPP if you really need it.