Any experience with ASM policy affecting response stream (with no vulnerability/attack signature noted)?

I should have clarified - the clients seem to receive the response headers, but then no response content, not even a single byte. Still working on tcpdumps on both sides, but via e.g. curl access, the headers stream back (the last header being "Transfer-Encoding: chunked", followed by two carriage returns) - then nothing else.