Skip to main content
lmbrd
lmbrd
Explorer
July 24, 2023
Solved

ISDB update through REST API from file "ffdb_..."

  • July 24, 2023
  • 3 replies
  • 9177 views

Hello, community

I am trying to update the database ISDB through REST API FortiOS from file "ffdb_...". Which db_name should I use? The REST API Reference does not say about it? Also, when I try to update through web from file "ffdb_...": Fortiguard→ Firmware & General Updates I get the error: "Failed to upgrade database"

Снимок.PNG

Best answer by Richie_C

Hi

After some more investigation, it seems that a manual ISDB update via the GUI is not possible in the version you are running (6.4 or 7.0). A manual update is only possible via CLI. This is described in the following documents:

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Manual-Update-of-Internet-Service-Database-ISDB/ta-p/195088


https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-manually-upgrade-ISDB-database-with-offline/ta-p/195352

 

However, I tested some other versions and can see that the functionality you require is available in 7.2 and 7.4. We can see a new button specifically for upgrading the ISDB.

ISDB-7point2.JPG

 

I tested the functionality in my lab and i was able to successfully upgrade the ISDB using the GUI.

 

Thanks

3 replies

Richie_C
Staff
Richie_C
Staff
July 24, 2023

Hi

It sounds like the first issue you need to fix is the error message "Failed to upgrade database". 

I would recommend you take a look at the following guide:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-connect-to-FortiGuard-servers/ta-p/226149

The guide covers many common issues when the FortiGate tries to connect to FortiGuard to download updates.

I hope it helps!

 

lmbrd
lmbrdAuthor
Explorer
July 24, 2023

hello, my Fortigate connect to Fortiguard services. IPS and APPCTL upgrade from file successfully working (web and API), but not ISDB. Which value in "db_name" parameter should I use to urgrade ISDB via API?

Richie_C
Staff
Richie_C
Staff
July 24, 2023

In answer to the second part of the question. You could check the license status with the following GET:

/api/v2/monitor/license/status

I can see that there is a database called "internet_service_db"

    "internet_service_db":{       "type":"downloaded_fds_object",       "status":"licensed",       "version":"0.00000",       "last_update":978300000,       "last_update_attempt":1690205630,       "last_update_result_status":"update_result_no_updates",       "last_update_method_status":"update_method_manual"

Thanks

Richard

 

Richie_C
Staff
Richie_C
Staff
July 24, 2023

I believe you would need a valid license for this (As per the output above). 

lmbrd
lmbrdAuthor
Explorer
July 24, 2023

This is a part my GET /api/v2/monitor/license/status

 "internet_service_db":{       "type":"downloaded_fds_object",       "status":"licensed",       "version":"7.03291",       "last_update":1689746781,       "last_update_attempt":1689839411,       "last_update_result_status":"update_result_not_authorized",       "last_update_method_status":"update_method_manual"     },
lmbrd
lmbrdAuthor
Explorer
July 24, 2023
It's FortiGate 600E
v6.4.12 build2060 (GA)
Terms & ConditionsAccessibility statement