Internet Services

The Internet Service Database (ISDB) data comes from the FortiGuard service system. Information is regularly added to this database, for example, geographic location, IP reputation, popularity & DNS, and so on. All this information helps users define Internet security more effectively. You can use the contents of the database as criteria for inclusion or exclusion in a policy.

Internet Service can be applied both as source and destination objects in a policy. You can also apply Internet Services to shaping policy.

The Internet Service Database can be configured with different numbers of addresses:

config system global
    set internet-service-database {mini | standard | full | on-demand}
end

Value	Description
mini	Small sized Internet Service database with very limited IP addresses.
standard	Medium sized Internet Service database with most IP addresses.
full	Full sized Internet Service database with all IP addresses.
on-demand	Internet Service database with customer selected IP addresses.

The default value varies between model. For FortiGate models that have 2GB of memory, it is recommended that the on-demand database be used.

The following topics provide instructions on configuring policies with Internet Service:

• Using Internet Service in a policy

• Using custom Internet Service in policy

• Using extension Internet Service in policy

• Global IP address information database

• IP reputation filtering

• Internet service groups in policies

• Allow creation of ISDB objects with regional information

• Internet service customization

• Look up IP address information from the Internet Service Database page

• Internet Service Database on-demand mode

• Enabling the ISDB cache in the FortiOS kernel