Expecting a performance hit by upgrading your gateways to R80.10? In some cases, your performance may be better. It shouldn't be worse, though.
Issues with swapping hardware aside, how do you move the policy? It's not that difficult.
There's a new version of the Endpoint client (E80.71 HF1) that should resolve this and similar issues with HTTPS traffic being blocked.
Good discussion about Identity Awareness in larger/managed server environments.
Good tip on getting out of a jam with your vSEC gateways in Microsoft Azure.
We're planning more CheckMates Live events for 2018, but nothing to announce yet.