For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 07, 2022

AWAF OpenAPI Import and default defense attribute values for json content profiles

Hi Folks, I created an ASM Security Policy with the default API-Security template and imported an OpenAPI file. This works perfectly: allowed urls and matching json content profiles are created. It...
security
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 12, 2022

The profiles are automatically created through the import of the OpenAPI files and the Defense Attributes of this JSON Content Profiles are always set to the values from the screenshot. My question is how I can set this defaults without knowing the name of the JSON Content Profiles beforehand. The names are dynamically created from the OpenAPI definition. I use a declaration to create the Policy.

I tried to change the Defense Attributes of the default json content profile and I hopped the created json content profiles inherits there defense attribute settings from this profile, but this is not the case. I found also no other place to define this defaults.