Internet Services database

Hi,
 
bit of a noob...I am wondering about the Internet Services database..what is the general practice with this?
 
I recently installed a 60F and engaged a colleague to help me setup the firewall policies and he decided to basically look up Microsoft and BitDefender websites, etc for what ip address and urls to allow..while this is sensible I have noticed that there is an Internet database services that also lists all these services for Microsoft and Bitdefender and others...what is the general opinion about this? I raised it with my colleague and he said I was not as safe because someone could get to those lists and then I was compromised..I understand the logic but realistically how valid is this? I am finding that I am having to keep adding addresses to get certain sites to work properly because either the documentation is out of date or the url was missing from the doco...having Fortinet keep this up-to-date would be a big convenience but what is the general practice here? what do most sys admins do? unlock as urls are needed or use the Internet Services database?