Manual Chapter : Working with OpenAPI and allowed HTTP URLs

Applies To:

  • BIG-IP ASM

    16.0.1, 16.0.0, 15.1.0, 15.0.1, 15.0.0

Updated Date: 07/07/2026

Working with OpenAPI and allowed HTTP URLs

You should not manually create allowed HTTP URLs in the GUI when working with an API Security policy template and Swagger file. Include the allowed HTTP URLs in the your Swagger file.

.

Note: The URL attribute operationId can be used to filter traffic events related to a URL.

Note: Attribute Body is Mandatory will be enabled if requestBody.required is defined as true by the OpenAPI spec for an endpoint.