I had a similar issue with speedtest results dropping by 50% when both Suricata and Zenarmor were enabled until I set the "Pattern matcher" to "Hyperscan" under Services->Intrusion Detection->Administration.
Your processor needs to support the SSE3 extension though.
Your processor needs to support the SSE3 extension though.