For this, Web App Firewall protection for VPN virtual servers and authentication virtual servers, does this enable the WAF under security? How do we look at the profiles?

No, because the integrated WAF for GW and AAA is also available for non-premium licenses. For the standalone WAF-Module under security, you need premium. There are default profiles for WAF for GW and AAA which comes with firmware. You can edit these, called "_`ns-aaatm-default-appfw-profile`,

ns-aaa-default-appfw-profile

, and `ns-vpn-default-appfw-profile"`_ If you want to check if the gw waf is blocking sth, you should integrate appflow with NetScaler Console - for example see https://www.julianjakob.com/netscaler-waf-for-gateway-and-aaa/#Integration_with_NS-Console