How to configure ASM for an application using REST?

Hello here are some hints to start with : - with automatic policy building, you have an option in advanced setting called "collapse to one entity" which will help you to aggregate multiple urls entities if they have same characteristics.

REST means nothing on a protocol validation point of view, what you could use are profiles allowing to validate content inside formats like json or xml used by your webservices. you can either create and attach your content profile to urls, or while doing the automatic policy creation, check the option "JSON/XML payload detection" in the wizard's third tab.

White listing using regex worth nothing on an administration point of view that's why we propose either to learn everything automatically (thus you are exhaustive) or with simplified regex like.