For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Declarative Advanced WAF policy lifecycle in a CI/CD pipeline

The purpose of this article is to show the configuration used to deploy a declarative Advanced WAF policy to a BIG-IP and automatically configure it to protect an API workload by consuming an OpenAPI...
Published Sep 22, 2020
Version 1.0
AS3
ASM Advanced WAF
BIG-IP
CICD
Declarative WAF
security
series-api-security
Super-NetOps
B_Earp's avatar
B_Earp
Icon for Altocumulus rankAltocumulus
Oct 03, 2024

Using the uri option in the declaration it is unclear how the policy arrives at the BIG-IP. 

 "My_ASM_Policy": {
        "class": "WAF_Policy",
        "url": "https://example.com/asm-policy.xml",
        "ignoreChanges": true

How does the data from that url get uploaded/downloaded to the big-ip.

1. PUSH: Does the AS3 software include the json data from that url as part of it's declaration?

2. PULL: Does the BIG-IP download the json from that url?