Any suggestions for beginner?

Salutations in return!

 

 

I'm afraid your question is a little bit vague, so I'm not certain I have a good answer for it. The ASM policy can be viewed as a largely hierarchical structure. From the proverbial bottom up, Parameters belong to URLs/Objects, and URLs/Objects belong to Object/File Types. You can, of course, create global parameters also, but it sounds like you probably need to define more of your application.

 

 

Do you have any traffic moving through your policy? Monitoring learning suggestions after browsing an application with the ASM in Transparent mode is a good way to get a feel for the elements of the policy.

 

 

It sounds like you've done quite a bit of reading up on the subject, too! I would consider revisiting some of the configuration guide. They may focus more on using automatic policy creation and the policy builder, but can reinforce some of the basic principals once you see them in action.

 

 

Let us know how it goes! =]