File upload and ASM

Bypass for an ASM policy better be done just for the violation with an irule as I see it as to not stop the ASM checks for urls , headers etc. and this way you are making a smaller security hole 😗. This is a nice example:

https://clouddocs.f5.com/api/irules/ASM__unblock.html

Other option that can be tested is Request Body Handling, select Do Nothing. under the url:

https://my.f5.com/manage/s/article/K32081491

What was mentioned till now are all good solutions.