Description
This article describes how to configure and check which Internet Service database version is installed and running on FortiOS-based devices and virtual machines.
Scope
FortiOS v7.0.4 and above, v7.2.1 and above.
Solution
Starting with v7.0.4 and v7.2.1, FortiOS provides a new configuration parameter (internet-service-database) to choose which Internet-service databases (full, standard, mini, or on-demand) should be downloaded from FortiGuard and installed.
Run the following command and substitute [version] with full, standard, mini or on-demand:
config system global
set internet-service-database [version] <----- To see a list of available version names and details, enter '?'.
mini Small sized Internet Service database with very limited IP addresses.
standard Medium sized Internet Service database with most IP addresses.
full Full sized Internet Service database with all IP addresses.
on-demand Internet Service database with customer selected IP addresses.
end
For example:
config system global
set internet-service-database mini
end
To check which Internet Service database version is in use, use the following command:
diagnose autoupdate versions
It will display information about the current database. For example:
...
Internet-service Mini Database <- Mini.
---------
Version: 7.02755
Contract Expiry Date: n/a
Last Updated using manual update on Wed Oct 19 11:57:54 2022
Last Update Attempt: Wed Oct 19 12:12:14 2022
Result: No Updates
...
The response above is an example of a mini-database.
The response above is an example of a Full database.
Internet-service Full Database:
---------
Version: 7.04150 signed
Contract Expiry Date: n/a <--- There is no separate license for ISDB.
Last Updated using scheduled update on Mon Apr 28 22:58:24 2025 <----- This is the last time the firewall successfully downloaded and applied an ISDB update.
Last Update Attempt: Tue Apr 29 14:43:15 2025 <----- This is the latest time the firewall checked for updates.
Result: No Updates <----- FortiGuard does not have a newer ISDB version than the one already present.
Note:
- v6.2 and v6.4 do not allow the choice of which ISDB database to install. The database to install is selected based on the hardware platform type and cannot be changed.
- In case of using 'mini', make sure that all ISDB entries have been downloaded with their appropriate IP addresses. If the ISDB entries are not downloaded by 'mini', make sure to change the configuration to 'on-demand', 'full', or 'standard'.
