As with any server, you should have a monitoring solution so you can pinpoint the issue causing the performance degradation. There are a bunch of products out there. A few vendors to look at would be Vizioncore’s vFoglight and eGInnovations.
As for your anti-virus question, you’ll need to install an anti-virus on each guest OS. You can’t run an anti-virus on the host only.