Forum Discussion

Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Dec 07, 2022

AWAF OpenAPI Import and default defense attribute values for json content profiles

Hi Folks, I created an ASM Security Policy with the default API-Security template and imported an OpenAPI file. This works perfectly: allowed urls and matching json content profiles are created. It...
security
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP

I opened a case for this and it is a limitation with no workaround. The profiles must be changed after import manually or by script.

This is absolutely not ideal and limits the usable OpenAPI import scenarios.

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 16, 2022

Juergen_Mang, can you give me a sanitized version of a sample policy with the openAPI files and point out where the defaults are in them? I'm not super familiar with that, but I might be able to work the script side out for you so they can be run on import manually, or if possible, automatically. Won't know until I have some sample data to work with. Let me know!