How to utilize ASM module in a better why?

If you cannot see the decrypts HTTP payload, the ASM can do nothing to protect it.