Layer7 API Management

I would like to use the Limit Message Size Assertion on the response coming from the backend application but I am seeing 2 Policy Validation Messages that are disabling it. What other assertion(s) are required to get the Limit Message Size Assertion enabled? I tried adding "Require WS-Security Token..." but no help. Any suggestions welcomed

Your configuartion is correct. The assertion are not disabled and should work.

What you see are validation messages. Probably you have another disabled assertion in your policy.

The XPath related warning I think you can ignore because this assertion has AFAIK no restriction to the message content.