What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

The Fortinet Internet Service Database (ISDB) is a core component for simplifying SD-WAN and firewall policy administration. It contains a dynamically updated list of IP addresses, protocols, and port numbers for thousands of common internet services (like Microsoft 365, Salesforce, etc.).

By using an ISDB object (e.g., Microsoft.Office365) as a destination in an SD-WAN rule, administrators can accurately steer traffic without needing to manually track and update the constantly changing IP addresses of these cloud services. FortiGuard services automatically push updates to the ISDB, which significantly reduces administrative overhead and ensures policies remain effective as services evolve.

B. The ISDB is a database of IP addresses and ports; it does not require Application Control, which uses deep packet inspection for signature-based identification.

C. The SD-WAN rule applies the action. The ISDB is used as a destination matching criterion in the rule, not a source, and it identifies services, not generic application types.

1. Fortinet FortiOS 7.0.0 Administration Guide, Internet Service Database, Page 1081: "The FortiGuard Internet Service Database is a comprehensive, up-to-date public IP address database that combines IP address range, port number, and protocol. FortiGuard services automatically push updates to the database... You can use Internet Services in firewall policies, and SD-WAN rules and performance SLAs to simplify administration." (This supports options A and D).

2. Fortinet SD-WAN Architecture Guide 7.0, Internet Service Database (ISDB), Page 13: "The Fortinet Internet Service Database (ISDB) simplifies this process by providing an up-to-date database of IP addresses, port numbers, and protocols used by all the major cloud services. The ISDB is kept up-to-date automatically by FortiGuard Labs, which removes the administrative burden of constantly updating all the IP addresses used by these services." (This directly confirms the benefits in options A and D).

3. Fortinet NSE 7—SD-WAN 7.0 Study Guide, SD-WAN Deployment and Administration, Section: Internet Service Database: "The Internet Service Database (ISDB) is a database of public IP addresses of well-known internet services, which is compiled and maintained by FortiGuard. The ISDB is dynamically updated on your FortiGate... Using the ISDB in SD-WAN rules simplifies configuration and reduces administrative overhead because you don’t have to manually maintain the IP addresses for the services." (This explicitly validates options A and D as key benefits).