Skip to main content
johnathan
Staff
johnathan
Staff
August 27, 2025

Technical Tip: ISDB lookups failing on entry-level platforms, despite the database being installed correctly

  • August 27, 2025
  • 0 replies
  • 391 views
Description This article describes how to resolve a scenario where ISDB lookups seem to be failing, but the ISDB database is installed correctly.
Scope FortiOS v7.2.10 and earlier.
Solution

Under certain circumstances, when using an Entry-level FortiGate model (FortiGate models numbered from 30 to 90), ISDB queries may start to fail when on a version below 7.2.11. Policies with ISDB entries will no longer be matched, and manual lookups will fail:

 

FortiGate # diagnose internet-service match root 1.1.1.1 255.255.255.255
<no output>

 

Errors such as those seen below may also be seen when running 'execute internet-service4 refresh':

 

FortiGate # execute internet-service4 refresh
Internet Service IPv4 refresh start ...
Start to initialize APP file.
Start to initialize MAP file.
Internet Service failed to refresh. ret=-4 (kernel error)

 

When checking 'diagnose autoupdate versions', the ISDB database is present:

 

FortiGate # diagnose autoupdate versions

...

Internet-service Standard Database
---------
Version: 7.04307 signed
Contract Expiry Date: n/a
Last Updated using scheduled update on Sat Aug 23 03:16:10 2025
Last Update Attempt: Mon Aug 25 11:16:16 2025
Result: No Updates

 

This behavior has been addressed in FortiOS version 7.2.11.
    Terms & ConditionsAccessibility statement