Technical Tip: Configuring and checking the Internet Service database version installed and running on FortiOS based units

[mmaubert]

Description

This article describes how to configure and check which Internet Service database version is installed and running on FortiOS-based devices and virtual machines.

Scope

FortiOS v7.0.4 and above,

FortiOS v7.2.1 and above.

Solution

Starting with FortiOS v7.0.4 and FortiOS v7.2.1, FortiOS provides a new configuration parameter (internet-service-database) to choose which Internet-service databases (full, standard, mini or on-demand) should be downloaded from FortiGuard and installed.

Run the following command and substitute [version] with full, standard, mini or on-demand:

config system global

    set internet-service-database [version]  <- To see a list of available version name and details, enter '?'.

mini            Small sized Internet Service database with very limited IP addresses.
standard        Medium sized Internet Service database with most IP addresses.
full            Full sized Internet Service database with all IP addresses.
on-demand       Internet Service database with customer selected IP addresses.

end

For example:

config system global
    set internet-service-database mini
end

To check which Internet Service database version is in use, use the following command:

diagnose autoupdate versions

It will display information about the current database. For example:

...

Internet-service Mini Database   <- Mini.

---------

Version: 7.02755

Contract Expiry Date: n/a

Last Updated using manual update on Wed Oct 19 11:57:54 2022

Last Update Attempt: Wed Oct 19 12:12:14 2022

Result: No Updates

...

The response above is an example of a mini database.

Note: FortiOS v6.2 and v6.4 do not allow the choice of which ISDB database to install. The database to install is selected based on the hardware platform type and cannot be changed.

Note: In case of using 'mini', make sure that all ISDB entries have been downloaded with their appropriate IP addresses. If the ISDB entries are not downloaded by 'mini', make sure to change the configuration to 'on-demand', 'full' or 'standard'.