ASM manual learning mode parameters and URLs

Are you sure that the learning mode for parameters is really "Add All Entities" and not "Selective"? It's not clear from your first sentence. If you changed the learning mode for parameters at any point, make sure you clicked Save and Apply Policy. Also, if you view the Learning and Blocking settings page, are the Learn and Alarm checkboxes for "Illegal Parameter" selected? If you have four policies, make sure you are editing the correct one.