ASM-legitimate traffic

learning for sure is a good way to prevent this if you have the environment for it.

when you now have something blocked which shouldn't be blocked you have to find to configuration which causes the block and change that. Where and how exactly differs from block reason to block reason. so can you share the message associated with the block in the ASM logs.

which TMOS version are you running?

also be sure to check with other employees working on this and having a chat with your F5 partner (or the demo's pointed out in the other post), getting ASM explained will help a lot then trying to find out everything yourself in production.