ASM auto policy stuck at 90%

Looks like the policy hasn't seen enough traffic to trigger the enforcement for the parameters. You can stop the policy builder at any time and then manually enforce them. Don't believe it will remove wildcard this way, you may need to do this yourself.

In the GUI, can't quite recall where, you can see the metrics the policy builder needs. If the traffic is known and clean you can add an IP address, for example, as a trusted IP. This way it doesn't require much visibility of traffic to build and enforce a policy. Worth taking a look.

N