Firewalls today are able to filter at line rate for a single flow on an interface. If you want to allow 100G by handing 10 10G flows in parallel this is completely possible, but not quite the same thing.
Delivering this function is very costly, because of stateful inspection you must implement flow sticking which require buffering which then impacts performance
