Advanced WAF v16.0 - Declarative API

Since v15.1 (in draft), F5® BIG-IP® Advanced WAF™ can import Declarative WAF policy in JSON format. The F5® BIG-IP® Advanced Web Application Firewall (Advanced WAF) security policies can be deploy...
Published Jul 30, 2020
Version 1.0
api
application delivery
AS3
ASM Advanced WAF
declarative
SecOps
security
series-devcentral-basics
waf
B_Earp's avatar
B_Earp
Icon for Altocumulus rankAltocumulus
Oct 03, 2024

Using the uri option in the declaration it is unclear how the policy arrives at the BIG-IP.

 "My_ASM_Policy": {
        "class": "WAF_Policy",
        "url": "https://example.com/asm-policy.xml",
        "ignoreChanges": true

How does the data from that url get uploaded/downloaded to the big-ip.

  1. PUSH: Does the AS3 software include the json data from that url as part of it's declaration?
  2. PULL: Does the BIG-IP download the json from that url?