Technical Tip: Deciphering FortiGuard database abbreviations and subscriptions/services

[enguyen3467]

Description	This article describes the full name of each FortiGuard database abbreviation and subscriptions/services. These abbreviations can be seen while performing an update debug while executing a manual update (execute update-now) or in the General System Events with any log entries starting from 'Fortigate scheduled update...'. The name of the database can be viewed in the output of the command 'diagnose autoupdate versions'.
Scope	FortiOS.
Solution	aven AV Engine virdb, avdb Virus Definitions etdb Extended set exdb Extreme set mmdb Mobile Malware Definitions flen IPS Attack Engine idsdb, nids Attack Definitions wips Attack Definitions (proxy-based HTTP/HTTPS) idsetdb Attack Extended Definitions wiet Attack Extended Definitions (proxy-based HTTP/HTTPS) apdb Application Definitions wapp Application Definitions (proxy-based HTTP/HTTPS) isdb OT Threat Definitions (v7.2 and earlier: Industrial Attack Definitions) fmwp FMWP Definitions (Firmware Virtual Patch) mudb IPS Malicious URL Database iotd IoT Detect Definition otdb OT Detect Definitions otdb OT Patch Definitions fldb Flow-based Virus Definitions dnsbot, dbdb Botnet Domain Database ffdb Internet-service Database cidb Device and OS Identification uwdb URL Allow list dldb DLP Signatures geoip IP Geography DB crdb Certificate Bundle mcdb Malicious Certificate DB macdb (madb in update debug) Mac Address Database afdb AntiPhish Pattern DB avai AI/Machine Learning Malware Detection Model icdb ICDB Database casb Inline CASB Database fmdm Modem List tzdb Timezone Database sfas Security Rating Data Package SPAM AntiSpam FMWR Firmware & General Updates PBDS FortiGuard IOC SOAR FortiAnalyzer Security Automation SOCA SOCaaS AFAC FortiAnalyzer Cloud Subscription SBCL Sandbox Cloud Subscription FCSS FortiConverter Service Subscription FMGC FortiManager Cloud Subscription FURL FortiGuard URL, DNS & Video Filtering Service ZHVO FortiGuard Virus Outbreak Protection Service New FortiOS minor versions may introduce new databases to support new security features of the firewall. In addition, there may be instances where the database abbreviation is not shown in the update debug or it did not appear to be updated at all. Therefore, to check each FortiGuard database version with the last time an update was attempted with the result in the CLI, execute the following command: diagnose autoupdate versions Note regarding Internet Service Database (FFDB): By convention, some documentation abbreviates Internet Service Database as ISDB. In FortiOS firmware v7.4.1 and later, ISDB refers to 'OT Threat Definitions'. In FortiOS v7.4.0 and earlier, ISDB refers to 'Industrial Attack Definitions'. See 'Operational Technology Security Service'.