ASM Policy to disallow a url which have specific parameter

You can configure the policy to block illegal parameters, add the parameters you want to allow, and then remove the wildcard for parameters. Would that work for you?