How is this improved in current Flows/SecureXL?

In previous version, the full TCP three-way handshake was sent to the firewall kernel for inspection. How is this improved in current Flows/SecureXL?

A.
Only the initial SYN packet is inspected The rest are handled by IPSO

B.
Packets are offloaded to a third-party hardware card for near-line inspection 46

C.
Packets are virtualized to a RAM drive-based FW VM

D.
Resources are proactively assigned using predictive algorithmic techniques