BIG-IP F5 icon

BIG-IP F5

Interact with F5 BIG-IP via the iControl REST API

Actions38

ASM → Initiate Vulnerability Assessment

AI-generated

Summary

Starts a vulnerability assessment scan against a BIG-IP ASM policy by POSTing to /mgmt/tm/asm/tasks/initiate-vulnerability-assessment. It creates an asynchronous ASM task whose progress can be polled afterwards.

Inputs

  • Policy Reference Link (required) — Self-link of the ASM policy to scan (e.g. https://localhost/mgmt/tm/asm/policies/). Sent in the body as policyReference: {"link": }.
  • Subscription ID — Subscription ID for the vulnerability assessment service. Sent as subscriptionId in the request body.
  • Request Options — Node-level HTTP settings: batching (items per batch, batch interval in ms), ignore SSL issues, proxy URL, and timeout in ms (default 10000).

Output shape

The JSON response from the BIG-IP iControl REST API for the created task, one result per input item. The source doesn't define the response fields.

The call is asynchronous. To track progress, use the Check Task Status operation with task type 'Initiate Vulnerability Assessment' and the task ID from the response. Authentication and host come from the bigIpF5Api credential.

Examples

Example 1: Scan a WAF policy on demand

Resource: ASM; Operation: Initiate Vulnerability Assessment; Policy Reference Link: https://localhost/mgmt/tm/asm/policies/vagoQLF6uOoBKvS8h3C19w

Example 2: Scan using a scanner service subscription on a lab device with a self-signed certificate

Set Policy Reference Link and Subscription ID; under Request Options enable Ignore SSL Issues (Insecure).

Links

Discussion