ASM CSRF Configuration

Hi All,   I have created a security policy and enabled the CSRF. If i want to enable the whole we site URL can i use only * in the URL List.   Or   Can i use /www.secure.com/* ?   I am r...