BIG-IP F5 icon

BIG-IP F5

Interact with F5 BIG-IP via the iControl REST API

Actions38

ASM → Import Vulnerabilities

AI-generated

Summary

Starts an ASM background task on F5 BIG-IP that imports vulnerability scanner data into a specified ASM (WAF) policy, via POST to /mgmt/tm/asm/tasks/import-vulnerabilities.

Inputs

  • Policy Reference Link (required) — Self-link of the target ASM policy (e.g. https://localhost/mgmt/tm/asm/policies/). Sent as policyReference: {"link": }.
  • Import Vulnerabilities Options — Optional collection: Scan ID (scanner-assigned scan ID), Subscription ID (vulnerability assessment service subscription), and Import All Domain Names (boolean, sent as importAllDomainNames). Only added fields are sent.
  • Request Options — Node-level settings: batching (items per batch, interval), ignore SSL issues, proxy URL, and request timeout in ms (default 10000).

Output shape

The JSON response from the BIG-IP iControl REST API for the created import-vulnerabilities task, typically a task record including an ID.

The task runs asynchronously on the BIG-IP. The node does not poll. To track completion, use the ASM 'Check Task Status' operation with task type 'Import Vulnerabilities' and the returned task ID. The exact response fields are not defined in the node source.

Examples

Example 1: Load results of a completed scan into a WAF policy.

Policy Reference Link = https://localhost/mgmt/tm/asm/policies/vagoQLF6uOoBKvS8h3C19w; options: Scan ID = scan-123.

Example 2: Import vulnerabilities for all domain names tied to a subscription, then check the task.

Set Policy Reference Link, add Subscription ID and enable Import All Domain Names; follow with Check Task Status using the returned task ID.

Links

Discussion