Packet filtering & sec & performance

I'd be surprised if a firewall's processing time impacted the RTT enough to warrant a change like this. Personally, I like to keep my security controls on either side of the LTM and let it do what it does best, so I can't speak to the performance issues regarding packet filtering.