The terms aren't precise scientific terms but rather a combination of commonly used industry terms combined with product positioning or marketing.
Generally speaking, Cisco most commonly used the term Next Generation Firewall to refer to the ASA firewall with the CX module.
Next Generation IPS refers in Cisco terms generally to anything with the FirePOWER technology from the Sourcefire acquisition built into it. That includes ASA firewalls with FirePOWER service modules as well as dedicated FirePOWER appliances.
AVC is the ability to inspect packet content to determine Application content and behavior in order to assess risk and enforce policy. There is very rudimentary AVC in a base ASA in that we can do things like regex matching on http payload in an inspection. It's generally not considered as a serious way to enforce policy. When we use the more full-featured AVC (CX term) or Control (FirePOWER term) as a source of data for matching Intrusion Prevention System profiles and blocking, warning etc., it's IPS.
ESA and WSA are complimentary products to the FirePOWER set, providing much more granular control over emails and web content filtering respectively. There is some overlap and each of those two has the option to add-on Advanced Malware Protection (AMP) in ways specific to their function. Also, we can do URL filtering with FirePOWER, although the WSA provides additioanl layers of control and scalability in that specific area.
The CX has the concept of signature updates if you have the IPS feature license. It does not allow fine grained selection of the signatures nor customizing the signatures used. There are also updates to the AVC profiles.
The FirePOWER products have a combination of updates - SNORT Rule updates, Vulnerability Database updates and Geolocation updates.
AMP also has dynamic cloud-based lookup of file hashes to determine disposition of files when analyzing for potential malware.
