For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 03, 2025
Solved

F5 AWAF/ASM Fails to update OpenAPI file through REST-API

Hello Everyone,   I followed Update an existing API security policy with a newer swagger file but this only works when creating a new policy not upgrading an existing one when you change the open...
asm
awaf
security
  • Juergen_Mang's avatar
    Juergen_Mang
    Dec 03, 2025

    I use this paylod for the POST request to /mgmt/tm/asm/tasks/import-open-api

    $swagger_file is the previous uploaded swagger file

    $waf_policy is /mgmt/tm/asm/policies/<policy hash>

    {
    apiType: "swagger",
    filename: $swagger_file,
    policyReference: {
        link: $waf_policy
    }
}

     

SamCo's avatar
SamCo
Icon for Cirrus rankCirrus
Dec 03, 2025

I am just making a quick guess but how is the request ? have you try to use HTTP PATCH instead of POST ?

  • Nikoolayy1's avatar
    Nikoolayy1
    Icon for MVP rankMVP
    Dec 03, 2025

    PUT and PATCH are not implemented for this endpoint. Already tested this.