The three I have found so far:
- Custom B2B Apps (*Enterprise Apps are different to this)
- Branding (Company Logo / Hide Dashboard Links)
- CoA / Cisco ISE integration (Feature release 'April 27, 2016')
Is this them all? Or are there more?
There is also a virtual MX concentrator for access points (can not do AutoVPN). I suspect this might be phased out now their is a vMX.
Their is also a NAT feature for branches that use AutoVPN. It allows all your branches to have the same subnet and then to NAT them as they go into the VPN.