You never had GlobalProtect take a multi-Gbps connection down to <20Mbps due to all that userland processing of packets thanks to Apple's lack of vendor kext.