FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
gakshay
Staff
Staff
Article Id 195088

Description


This article describes the steps to manually update the Internet Service Database (ISDB). ISDB is updated automatically when the FortiGate is connected to the FortiGuard Servers.

In case the FortiGuard server is unable to automatically update the ISDB, execute the following command:

 

execute update-now

 

To view the database update, execute:

 

diagnose autoupdate versions

 

Scope

 

FortiGate.


Solution

 

If the ISDB is not updated after following the above steps, then manually update the ISDB Package, for instance via a TFTP server or GUI, by following these steps:

 

Note:

  • ISDB updates in v7.0 and below are only available through the TFTP via CLI.
  • ISDB updates in v7.2 and newer can also be uploaded via the GUI:

 

  1. Download the ISDB Package from the Support Portal here: Go under Support -> Service Updates.

Example:

 

Untitled1.gif

 

If the version is after v7.2, the ISDB package can be uploaded via the FortiGate GUI. If it is earlier than v7.2, refer to the further steps below to upload via TFTP server.

 
 
  1. Download the TFTP server and upload the ISDB Package.

  2. Steps to load the upload file to FortiGate via CLI using TFTP:

execute restore other-objects tftp <filename> <tftp server ip address>:<port> <user> <password>

If a VDOM is configured, run it in the global context:

 

config global
execute restore other-objects tftp  <filename> <tftp server ip address>:<port> <user> <password>

Example:

 

execute restore other-objects tftp ffdb_fos62_00007.00025.pkg 172.31.131.53:11021 <user> <password>

This operation will overwrite the current other objects.

 

Do you want to continue? (y/n)y
Please wait...
Connect to tftp server 172.31.131.53 ...
##
Get other objects from tftp server OK.

 

Note:

For Microsoft Azure On-Demand user that does not have any physical FortiGate license, there will be no Service Updates available in the portal. Open a TAC ticket at https://support.fortinet.com/ to request the ISDB database.

 

Related articles:

Technical Tip: ISDB Database updates

Technical Tip: How to create a ticket for Fortinet TAC