Hi, Chris, and welcome to the UTM Community!
Guys, I think the issue is comparing single-user tests to simulations of multiple users. An SG 310 might well pass up to 5GB through Snort in an office of 100 active users and nothing other than Network Protection active. If you're considering using software or hardware appliances in your business, be sure to work with a reliable reseller so that the reseller has some skin in the game.
I had a phone conversation with William awhile back. He suggested that the only possible way to get the raw speed needed for low-user-count gigabit access would be to use ESXi installed on bare metal. He suggested a 16GB dual quad-Xeon with the GHz from all eight processors lumped into one or two very fast virtual CPUs. I don't know of anyone that's tried this.
Cheers - Bob
Ian,
home UTM 9.x running in ESXi 6 e3-1275v2
AP55c and AP10 (courtesy Astaro)
Three other UTMs, SUM and SFM in hibernation
XG 15.x MR3 in hibernation