Threat Emulation and firewall resources

[marcinw]

Hi,

Can anyone tell me based on experience what impact on the firewall efficiency has running Threat Emulation blade?  

I am wondering if threat emulation is scanning http downloads, smtp traffic (files in emails) does it have any sense if we have deployed 2 proxy servers for http/s and emails (I know zero day...) . Can you share your experience with this blade please ?

thanks

[PhoneBoy]

It will scan email or web traffic, depending on how you've configured the profile and whether or not HTTPS Inspection is enabled.
Most of the emulation work is done on a different system (on-premise appliance or cloud), so the performance impact is not substantial.