Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

zdenekzemba's avatar
zdenekzemba
Icon for Altostratus rankAltostratus
Mar 31, 2026

ASM/AWAF declarative policy

Hi there, I searching for options to automate ASM and rather want to avoid having AS3 in loop due to need to update it on F5 side. Luckily F5 introduced "declarative policy" But, I am not able to g...
devops
security
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Apr 07, 2026

Importing a declarative JSON Policy works in all my setups without problems.

You can have a look at Restsh and spcecially this script: https://github.com/AxiansITSecurity/Restsh/blob/master/restsh/modules/f5/bin/f5.asm.policy.declare or this script: https://github.com/AxiansITSecurity/Restsh/blob/master/restsh/modules/f5/bin/f5.asm.policy.import

A policy should look like:

{
   "policy" : {
      "type" : "security",
      "name" : "{{WAF_POLICY_NAME}}",
      "description" : "Created by {{CI_JOB_URL}}",
      "template" : {
         "name" : "{{VAR_F5_BASE_TEMPLATE}}"
      },
      "enforcementMode" : "{{VAR_ENFORCEMENT_MODE}}"
   }
}