You're right, I said something silly and invalid. What I was trying to say was simply that an in-series DPI implementation will increase round trip times and decrease bandwidth.

My personal understanding of DPI is that they want to do it in-series so as to be able to reset TCP connections immediately upon detecting a hit, but that might not be how they do it.