That depends on load... and I know what you're feeling. The cost is the setup of the scan itself.
I have a quad xeon 2.4 with 4gb of ram myself. Sometimes it scans near instantly, other times it takes 4-5 seconds.
You could create a no rack policy for traffic destined to microsoft's update servers...