How can I measure Advanced WAF (ASM) throughput on a running BIG-IP VE (per VIP / per policy)?

Hi everyone,

I’m running BIG-IP VE with LTM + Advanced WAF (ASM) and I’m planning a license upgrade (e.g., 200 Mbps to 1 Gbps). Before upgrading, I want to measure the real WAF throughput on the currently running VM, ideally:

• Per virtual server (VIP)
• And, if possible, per ASM/AWAF security policy

Questions:

1- Is there a supported way to get throughput (Mbps/Gbps) per ASM/AWAF security policy (not just per VIP), either from GUI, tmsh?

2- If per-policy throughput isn’t available, is VIP throughput the recommended proxy for WAF throughput (since the policy is attached to that VIP)?

3- For sizing/licensing discussions, should throughput be considered request-only or request + response (bidirectional)