In terms of CPU it is not totally overkill if you're using an IPS/IDS, bare in mind you'll also be disabling most of the network card offloading in a full fledged firewall and that will ultimately result in consuming slightly more CPU cycles.