Technical Tip: Verifying which Internet Service database type and version installed on FortiOS-based units
| Description | This article describes how to configure and verify which Internet Service database type and version is effectively installed and running on FortiOS-based devices and VMs. |
| Scope | FortiOS v6.2.11 and above. FortiOS v6.4.10 and above. FortiOS v7.0.4 and above. FortiOS v7.2.1 and above. |
| Solution | Starting with FortiOS v6.2.11, v6.4.10, v7.0.4, and v7.2.1 releases, 3 Internet-service databases of different sizes (mini, standard, and full) are available on FortiGuard and can be installed on FortiGate devices and VMs.
By default, the size of the internet-service database downloaded from FortiGuard and installed on a FortiGate device or VM depends on the hardware platform and type.
On FortiOS v6.2.11 and above, or v6.4.10 and above, the Internet-service database selected to be downloaded and installed is chosen by FortiOS based on the hardware platform and type and cannot be changed.
On FortiOS v7.0.4 and above, or v7.2.1 and above, the Internet-service database selected to be downloaded and installed is by default chosen by FortiOS on the hardware platform and type, but can manually be changed afterward using the 'internet-service-database' variable located in config system global.
Knowing which Internet-service database is effectively downloaded and installed can usually be done using the 'diagnose autoupdate versions' command.
diagnose autoupdate versions … Internet-service Full Database <<<<< --------- Version: 7.02812 signed Contract Expiry Date: n/a Last Updated using scheduled update on Wed Nov 9 03:47:44 2022 Last Update Attempt: Wed Nov 9 09:32:09 2022 Result: No Updates …
2. Case where the internet-service database standard version is selected for download.
diagnose autoupdate versions … Internet-service Standard Database <<<<< --------- Version: 7.02812 signed Contract Expiry Date: n/a Last Updated using manual update on Wed Nov 9 09:35:09 2022 Last Update Attempt: Wed Nov 9 09:35:09 2022 Result: Updates Installed …
3. Case where the internet-service database mini version is selected for download.
diagnose autoupdate versions … Internet-service Mini Database <<<<< --------- Version: 7.02812 signed Contract Expiry Date: n/a Last Updated using manual update on Wed Nov 9 09:36:29 2022 Last Update Attempt: Wed Nov 9 09:36:29 2022 Result: Updates Installed …
It is also possible to use the 'diagnose test update info' command to get more detailed information, such as the FDS object unique identifiers, knowing that, by design, Internet-service database IDs are split into 3 parts separated by a dash as detailed below:
Part 1: an internet-service database identifier indicating the database type and the FortiOS version to which it applies:
06002000FFDB00306 - FortiOS v6.2 Internet-service Database App file. 06002000FFDB00606 - FortiOS v6.2 Internet-service Database Map file (mini database). 06002000FFDB00406 - FortiOS v6.2 Internet-service Database Map file (standard database). 06002000FFDB00506 - FortiOS v6.2 Internet-service Database Map file (full database).
06004000FFDB00307 - FortiOS v6.4 Internet-service Database App file. 06004000FFDB00607 - FortiOS v6.4 Internet-service Database Map file (mini database). 06004000FFDB00407 - FortiOS v6.4 Internet-service Database Map file (standard database). 06004000FFDB00507 - FortiOS v6.4 Internet-service Database Map file (full database).
There are no more Internet-service Database Apps in FortiOS v7.0.
07000000FFDB01107 - FortiOS v7.0 Internet-service Database Map file (mini database). 07000000FFDB00907 - FortiOS v7.0 Internet-service Database Map file (standard database). 07000000FFDB01007 - FortiOS v7.0 Internet-service Database Map file (full database).
There are no more Internet-service Database Apps in FortiOS v7.2.
07002000FFDB02108 - FortiOS v7.2 Internet-service Database Map file (mini database). 07002000FFDB01908 - FortiOS v7.2 Internet-service Database Map file (standard database). 07002000FFDB02008 - FortiOS v7.2 Internet-service Database Map file (full database).
There is no more Internet-service Database Apps in FortiOS v7.4.
07004000FFDB02108 - FortiOS v7.4 Internet-service Database Map file (mini database). 07004000FFDB01908 - FortiOS v7.4 Internet-service Database Map file (standard database). 07004000FFDB02008 - FortiOS v7.4 Internet-service Database Map file (full database).
There is no more Internet-service Database Apps in FortiOS v7.6.
07006000FFDB02108 - FortiOS v7.6 Internet-service Database Map file (mini database). 07006000FFDB01908 - FortiOS v7.6 Internet-service Database Map file (standard database). 07006000FFDB02008 - FortiOS v7.6 Internet-service Database Map file (full database).
Part 2: The version of the database, such as version 7.02805, will be encoded as '00007.02805'.
Part 3: The date and time the database is downloaded, encoded in the format 'YYMMDDHHMM', such as November 4, 2022, at 11:01 PM, will be encoded '2211042301'.
For example, a FortiOS v6.2 Internet-service full database version 7.02805 downloaded on November 4, 2022, at 11:01 PM will be encoded as '06002000FFDB00506-00007.02805-2211042301'.
It should be noted that all Internet-service Database entries that do not apply to a device or not downloaded and installed have the corresponding version set to '00000.00000' and date/time set to '0101010000'.
For example, a FortiOS v6.2 Internet-service standard database version not downloaded and installed will be encoded '06002000FFDB00406-00000.00000-0101010000'.
Related documents: |