ASM Policy Automatic or Manual

I think the proper answer is "it depends":-) It depends on how good you know the application (inhouse dev apps or not, well known apps etc), how much human resources you have to take care of the policy and its changes (app changes). I have seen some customers enthousiastic to configure a fine-tuned policy but at the end they havent. Because of lack of resource and sometime because it's difficult to get good information about the app (and thus try mitigate the risk of false positives).

If you are not sure...go for Rapid or automatic