Technical Tip: Manual Update of Internet Service Database (ISDB) Package
Description
This article describes the steps to manually update the Internet Service Database (ISDB).
Scope
FortiGate.
Solution
ISDB is updated automatically when the FortiGate is connected to the FortiGuard Servers. In case the FortiGuard server is unable to automatically update the ISDB, execute the following commands:
To update only the ISDB version:
execute update-ffdb-on-demand
When using the command 'execute update-ffdb-on-demand' make sure to verify if 'update-ffdb' is enabled in FortiGuard settings. By default, the setting 'update-ffdb' is enabled.
config system fortiguard
set update-ffdb enable
end
To update all databases:
execute update-now
To verify the current ISDB version:
FortiGate # diagnose autoupdate versions | grep "Internet" -A 6
Internet-service Full Database
---------
Version: 7.04385 signed
Contract Expiry Date: n/a
Last Updated using scheduled update on Thu Dec 18 16:27:03 2025
Last Update Attempt: Thu Dec 18 18:27:01 2025
Result: No Updates
To view all the database versions:
diagnose autoupdate versions
If the ISDB is not updated after following the above steps, then manually update the ISDB Package, for instance via a TFTP server or GUI, by following these steps:
Note:
- ISDB updates in v7.0 and below are only available through the TFTP via CLI.
- ISDB updates in v7.2 and newer can also be uploaded via the GUI:
- Download the ISDB Package from the Support Portal: Go under Downloads -> Service Updates.
Example:
If the version is above v7.2, the ISDB package can be uploaded via the FortiGate GUI. If it is earlier than v7.2, refer to the further steps below to upload via TFTP server.
-
Download the TFTP server and upload the ISDB Package.
-
Steps to load the upload file to FortiGate via CLI using TFTP:
execute restore other-objects tftp <filename> <tftp server ip address>:<port> <user> <password>
If a VDOM is configured, run it in the global context:
config global
execute restore other-objects tftp <filename> <tftp server ip address>:<port> <user> <password>
Example:
execute restore other-objects tftp ffdb_fos62_00007.00025.pkg 172.31.131.53:11021 <user> <password>
This operation will overwrite the current other objects.
Do you want to continue? (y/n)y
Please wait...
Connect to tftp server 172.31.131.53 ...
##
Get other objects from tftp server OK.
Note:
- For a Microsoft Azure On-Demand user who does not have a physical FortiGate license, there will be no Service Updates available in the portal. Open a TAC ticket at Support to request the ISDB database.
- ISDB packages can only be found within the first major release of every trunk in the Support Portal. Example: Download the package for FortiGate in v7.4.8 by going to Downloads -> Service Update and selecting the model and release (v7.4.8), the ISDB package will not be visible. Instead, it will be available for download by selecting the first major release of the trunk (v7.4.0 in the example). The package will still be updated to the latest available version.
Selecting v7.4.8:
Selecting v7.4.0:
Related articles: