ASM Manual Learning Clarification

Hi,

You have 3 level of learning. And in any case you need the wildcard to be present in each entity of the security policy. You can remove the wildcard once you finished building your security policy.

Hi,

for each entity type, you can define those 3 levels (extract from kb) :

Never (wildcard only)   Specifies that when false positives occur, the system suggests relaxing the settings of the wildcard.

Selective   Applies only to * wildcard entity. 

Add All Entities    Creates a comprehensive whitelist policy that includes all web site entities. This option results in a large, more granular configuration with stricter security. If Policy Builder is running, it adds explicit entities that match a wildcard to the security policy. When the security policy is stable, the * wildcard is removed. If Policy Builder is not running, the system suggests adding explicit entities that match the wildcard.