By the current design, Web Security Parameter Parser is activated on specific HTTP/HTTPS Request, which inside Check Point code has special parameters set on its URL, on its Body, or on its Multipart. Web Security Parameter Parser extracts the 'context' and sends it for further processing. Even if no one has registered to receive this specific context to perform for further processing, the Web Security Parameter Parser is still activated (thus, valuable time might be lost).
The performance impact will be high only when significant amount of the HTTP traffic is of the following types:
multipart/form-data
application/x-www-form-urlencoded
In other cases, there should be no performance impact.