LTM service policy vs AFM service policy

This concept in the AFM maybe the confusing from firewall guys coming from other vendors, but that is simple if you have experience with LTM.

First, you need to understand in which mode you have AFM. Here is the section of the manual that explains that:

https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/1.html

The rule processing follows an order, there are more options, like self IP:

https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-13-0-0/2.html

So, if you have the AFM in ADC mode (default), you don't need to configure any rule when you create a virtual server. :P