The difference between Bloodhound heuristic scanning technology and intelligent active defense

Intelligent Active Defense can effectively defend against unknown threats and network attacks. Bloodhound heuristic scanning technology is mainly used for unknown viruses. These two technologies can coexist.
The concept of smart active defense is mainly used in firewalls. We usually think that a large amount of useless "junk" information will pop up when a new firewall is installed, ask if this process is allowed, the process accesses the Internet, acts as a server, and so on, and harass you one day or night. The ideal modern firewall will automatically allow or deny access to thousands of known programs, but if these programs are updated, the firewall will not be able to identify and automatically process them. Even a smart firewall (such as ZoneAlarm Internet Security) will raise difficult-to-solve questions, let alone how to answer them. For example, Norton's NIS2007 uses a firewall instead of you to evaluate programs. It automatically allows access to known normal programs and blocks known malicious programs. It will carefully analyze unknown programs. If these programs cause malicious behaviors, they will be blocked. Otherwise, they will be allowed, and you will not see any confirmation pop-up box.