Issue: ASM Violation that is manually disabled is automatically enabled days later

Are you running Automatic Policy Builder? Many people will deploy Automatic Policy Builder, and then try to manually tweak their configuration. That's fine so long as you remember to disable Automatic Policy Builder. If not, the APB will happily change settings on your policy to match what it thinks you want. This is not always what you actually want.