ASM CSRF Configuration

Hi All,

 

I have created a security policy and enabled the CSRF. If i want to enable the whole we site URL can i use only * in the URL List.

 

Or

 

Can i use /www.secure.com/* ?

 

I am running version 11.4