Update an ASM Policy Template via REST-API - the reverse engineering way

If you have 100 policies deployed from a template updating the template will only update new policies that are made from this template right?

I think so. I rarely configure policies manually. If you use the declarative way, the updated template is used as soon you freshly deploy your declaration.

I use the ASM policy templates only as a blank template, even more disabled and configured as the Blank template from F5. It is the best way for a declaration to start from scratch and not with some defaults from a template.

I never user Parent policies, they are crap in my opinion.

They are two solutions:

1. Use a declaration
2. Use a script to update your 100 policies

Both is easily possibly with my Axians Automation Framework ;)

A Restsh script could look like:

while read -r POLICY
do
    f5.asm.entity.add -t entity.urls-allowed.json -sVAR_ALLOWED_URL=/new-uri "$POLICY" urls
done < <(f5.asm.policy.list -rf ".items[].fullPath")