Technical Tip: Obtaining an IP list from an ISDB using FortiGate CLI

[jhelder]

Description	This article describes how to get the list of all ISPs that an ISDB is using.
Scope	FortiGate.
Solution	Find the ID for the ISDB that gets the list of IPs. It is possible to search for an ID using the command below, in this example, Fortinet IPs: diagnose internet-service id | grep -i fortinet Now that the ID is obtained, it is possible to retrieve the list of IPs using the command below: diagnose internet-service id 1245324 To locate all ISDBs that correspond to a specific subnet or IP address: diagnose internet-service match <vdom_name> <IP_Address> <Netmask> Example: diagnose internet-service match root 96.45.46.46 255.255.255.255 Note: This will return all ISDBs that match the queried IP address, including entries with different protocols and port numbers. To identify the exact ISDB that contains a specific 3-tuple (IP, Protocol, Port): diagnose internet-service info <vdom_name> <protocol_number> <port> <ip_address> Example: diagnose internet-service info root 6 53 96.45.46.46