ASM - how to protect a dynamic web pages

Hi Majda, you clearly misunderstood the wildcard concept - these are not real URLs you can access in the browser, but in your ASM policy. "" when use din your F5 ASM policy means "any URL". When "" used in a URL you access with your browser it will not work - it is a disallowed meta-character and is rightfully blocked.

It appears that you are lacking training in F5 ASM. I highly recommend that you take an F5 ASM training course to gain understanding about web applications and how to protect them from attacks using F5 ASM module. Information about F5 ASM training course is available here:

https://f5.com/education/training/courses/configuring-big-ip-asm-v11-application-security-manager