FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mmaubert
Staff
Staff
Article Id 228143

Description

 

This article describes how to configure and check which Internet Service database version is installed and running on FortiOS based devices and virtual machines.

 

Scope

 

FortiOS 7.0.4 and above,

FortiOS 7.2.1 and above.

 

Solution

 

Starting with FortiOS 7.0.4 and FortiOS 7.2.1, FortiOS provides a new configuration parameter (internet-service-database) to choose which Internet-service databases (full, standard, mini or on-demand) should be downloaded from FortiGuard and installed.

 

Run the following command and substitute [version] with full, standard, mini or on-demand:

 

config system global

set internet-service-database [version]  <- To see a list of available version name and details, enter '?'.

mini            Small sized Internet Service database with very limited IP addresses.
standard       
Medium sized Internet Service database with most IP addresses.
full           
Full sized Internet Service database with all IP addresses.
on-demand      
Internet Service database with customer selected IP addresses.

end

 

For example:

 

config system global
  set internet-service-database mini
end

 

To check which Internet Service database version is in use, use the following command:

 

diagnose autoupdate versions

 

It will display information about the current database. For example:

 

...

Internet-service Mini Database   <- Mini.

---------

Version: 7.02755

Contract Expiry Date: n/a

Last Updated using manual update on Wed Oct 19 11:57:54 2022

Last Update Attempt: Wed Oct 19 12:12:14 2022

Result: No Updates

...

 

The response above is an example with a mini database.

 

Note: FortiOS v6.2 and v6.4 do not allow the choice of which ISDB database to install. The database to install is selected based on the hardware platform type and cannot be changed.