Declarative Advanced WAF policy lifecycle in a CI/CD pipeline
The purpose of this article is to show the configuration used to deploy a declarative Advanced WAF policy to a BIG-IP and automatically configure it to protect an API workload by consuming an OpenAPI...
Published Sep 22, 2020
Version 1.0
Valentin_Tobi
Employee
Employee
B_Earp
Altocumulus
AltocumulusUsing the uri option in the declaration it is unclear how the policy arrives at the BIG-IP.
"My_ASM_Policy": {
"class": "WAF_Policy",
"url": "https://example.com/asm-policy.xml",
"ignoreChanges": trueHow does the data from that url get uploaded/downloaded to the big-ip.
1. PUSH: Does the AS3 software include the json data from that url as part of it's declaration?
2. PULL: Does the BIG-IP download the json from that url?