Skip to main content
johnathan
Staff
Staff
September 16, 2025

Technical Tip: 'ISDB license expired' inside of an update debug, even though the licenses are valid

  • September 16, 2025
  • 0 replies
  • 729 views
Description This article describes why a user might get 'ISDB license expired' when running an update debug, even though the licenses are valid.
Scope FortiOS.
Solution

If the Internet Service database is failing to be downloaded, usually an update debug is run to see why it cannot be downloaded:

diagnose debug reset

diagnose debug app update -1

diagnose debug enable

Inside of this debug, it may be possible to see 'ISDB license expired', even if the licenses are valid.
See the following output for example:

 

upd_status_set_ha_expiry[1511]-Serial Number: FG3H0E1234567YYY.- contract processed
upd_status_set_ha_expiry[1477]-Extracting contract...(SupportLevelDesc=05:Advanced HW*06:Web/Online*20:Premium)

upd_status_set_ha_expiry[1477]-Extracting contract...(SupportTypeDesc=AVDB:Advanced Malware Protection*COMP:*ENHN:*FMWR:Firmware & General Updates*FRVS:Vulnerability Management*FURL:FortiGuard URL, DNS & Video Filtering Serv
ice*HDWR:Hardware*NIDS:FortiGuard IPS Service*SPAM:AntiSpam*SPRT:*ZHVO:FortiGuard Virus Outbreak Protection Service)

__update_upd_comp_by_contract[432]-ISDB license expired. 

 

This error can be generated when the option to update ISDB objects was disabled under 'config system fortiguard':

config system fortiguard
    set update-ffdb disable
end

 

Once set to 'enable', the ISDB database was able to be downloaded successfully.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!