11-29-2020 06:49 PM
Whatever hypervisor you are using, with proper CPU pinning (or CPU affinity) settings and SR-IOV settings, Threat Prevention can achieve 10 Gbps on modern high performance servers.
Check the Table 4, where Threat Prevention achieves 13552 Mbps.
However, most network engineers cannot properly tune the above settings, and they are impossible to tune in the public cloud.
Also, since HTTPS traffic accounts for more than 80% of any enterprise traffic, Threat Prevention's 10 Gbps is rarely useful because SSL Decryption is the bottleneck.
Even in the Table 4 above, the throughput of SSL Decryption is only 24722 Mbps (about 18% of Threat Prevention).