Can somebody tell me their experience with full disk encryption?

1) Is there performance loss when the disk is encrypted?
2) Can the encryption status be seen from zenworks console?
3) What encryption does zenworks use? AES-256?
4) Is there a recovery process?
5) Does the login take longer on a laptop with FDE enabled?
6) Can you easly send a decrypt policy to a device?
7) Is the encryption key saved in MBR or TPM ship?
8) Can vm's or virtual box vms be encrypted?