Hello, community
I am trying to update the database ISDB through REST API FortiOS from file "ffdb_...". Which db_name should I use? The REST API Reference does not say about it? Also, when I try to update through web from file "ffdb_...": Fortiguard→ Firmware & General Updates I get the error: "Failed to upgrade database"
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi
After some more investigation, it seems that a manual ISDB update via the GUI is not possible in the version you are running (6.4 or 7.0). A manual update is only possible via CLI. This is described in the following documents:
However, I tested some other versions and can see that the functionality you require is available in 7.2 and 7.4. We can see a new button specifically for upgrading the ISDB.
I tested the functionality in my lab and i was able to successfully upgrade the ISDB using the GUI.
Thanks
"last_update":1689746781,
"last_update_attempt":1689839411,
It looks like it worked last week. It was successfully updated 5 days ago. Maybe something has changed?
No, every week I update databases via CLI (execute restore other-objects). But now I'm trying to do it via API.
Could you watch the video?
Is it correct to upload "ffdb_" file in "Firmware & General Updates"?
Does it work via web?
When I trying to upload file is sends file_content data in "appctrl" database. I think this is the error
I will try it in my lab over the coming days and see if i can replicate it.
I think i have the same behaviour in the lab. Could you please confirm something?
Please post the output.
thanks
Richard
Created on 07-27-2023 08:47 PM Edited on 07-27-2023 10:07 PM
thx Richard, this is what I have:
Trying update ISDB from ffdb file:
fw01 (global) # diagnose debug enable
fw01 (global) # diagnose debug application update -1
Debug messages will be on for 30 minutes.
fw01 (global) # upd_manual_idsdb[189]-Updating ids db
upd_status_save_status[144]-try to save on status file
upd_status_save_status[215]-Status file is up-to-date
upd_manual_idsdb[252]-No updates
For example update via apdb file success:
fw01 (global) # upd_manual_idsdb[189]-Updating ids db
doInstallUpdatePackage[1007]-Full obj found for APDB001
doInstallUpdatePackage[1017]-Updating obj APDB
installUpdateObject[342]-Step 1:Unpack obj 38, Total=1, cur=0
installUpdateObject[371]-Step 2:Prepare temp file for obj 38
installUpdObjRest[657]-Step 5:Backup /etc/application.rules->/tmp/update.backup
installUpdObjRest[671]-Step 6:Copy new object /tmp/updHalEYz->/etc/application.rules
installUpdObjRest[729]-Step 7:Validate object
installUpdObjRest[753]-Step 8:Re-initialize using new obj file
installUpdObjRest[765]-Step 9:Delete backup /tmp/update.backup
waitUpdateProcess[981]-ips_update_flush pid=6925 exit code 0
__update_status[1215]-APDB001 installed successfully
upd_status_save_status[144]-try to save on status file
upd_status_save_status[210]-Wrote status file
upd_manual_idsdb[223]-Update successful on appdb(38,1)
Its strange indeed. from the output, it seems that the FortiGate is already up-to-date.
I will do a few upgrades and see if the behaviour is the same.
Hi
After some more investigation, it seems that a manual ISDB update via the GUI is not possible in the version you are running (6.4 or 7.0). A manual update is only possible via CLI. This is described in the following documents:
However, I tested some other versions and can see that the functionality you require is available in 7.2 and 7.4. We can see a new button specifically for upgrading the ISDB.
I tested the functionality in my lab and i was able to successfully upgrade the ISDB using the GUI.
Thanks
Ok,thank you very much for the detailed analysis, Richard
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1519 | |
1019 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.