The BIG-IP Application Security Manager Part 1: What is the ASM?

Your posts are all good stuff! A question, please: I get confused on the many marketed features of BIG-IP on whether certain features are included in the TMOS regardless of appliance model/VE editions versus features that are only available when you choose to purchase a particular module license. Example: SSL Offloading is available and part of TMOS. URL Filtering is a module-based feature when we buy Secure Web Gateway. If IP Intelligence a module-based feature with ASM or are they part of TMOS? I understand IP intelligence or URL filtering is a subscription-based license. Question is, which features are native to TMOS and which are add-on to the modules we buy? Thanks!