Domains
Track and manage domains detected in scripts running on your application. These domains are identified from the client-side resources your application loads. Monitoring these domains helps prevent unauthorized third-party resources and detect malicious or unexpected domains that could skim customer data.
Review domains one at a time under Action, or select multiple and click Review.
| Field | Description |
|---|---|
| Domain | The detected domain associated with a script found on your application. |
| Application | The CSP application for which this domain appeared. |
| Resource Type |
One or more type of content that the browser is loading from each domain as part of the client-side activity of your application. For example:
|
| Category |
An enumerated type that includes more than 100 predefined classification values sourced from the FortiGuard website classification database. The system retrieves the category by querying the domain’s classification ID and then mapping it to the corresponding category name in the category dictionary. If no category information is available, "Unknown" is used as the default value. Examples include Information Technology, Shopping, and Phishing. For the full list of categories, please refer to Domains. |
| Popularity |
How often a domain or resource is accessed by users within your application’s client-side activity.
|
| Risk |
The Risk is determined by the Risk Score obtained from FortiGuard's web filtering service.
|
| Discovered On |
The date and time when this domain was detected for the first time. |
| Status |
|
|
Action |
Click the Action icon to review the selected domain. Select the desired status for the relevant domain:
|
Batch review domains
To review multiple domains at the same time, select the desired domains by checking the boxes on the left hand side of the table. Then, click Review.
Exempt Domain List
The Exempt Domain List contains domains that are always allowed on your application.
To manage an application's Exempt Domain List,
-
Click the dropdown in the top-right corner to select which Applications’ domains are displayed on this page.
-
Select the desired application in the dropdown. The Exempt Domain List button should no longer be grayed out.
-
From here, there are multiple ways of adding domains to the Exempt Domain List:
-
Batch select domains: Select the desired domains, then click Exempt domain List to add them to the list.
-
Enter domains: Click Exempt Domain List, then enter Exempt Domains. Click Add Domain to add more than one domain to the Exempt Domains List.
-
Edit Application: Navigate to Client-Side Protection > Applications and click the edit icon under Action. From here, you can view, add, or remove domains from the Exempt Domains List.
-
Domain Detail
Click on a Domain value to view its details.
General
|
Field |
Description |
|---|---|
|
Domain |
The javascript detected on your application. |
|
Status |
When there are multiple varying iterations of the same script, click compare version to view the differences. |
|
Risk |
|
|
AI Insight |
A description of the script based on the telemetry data collected by FortiAI. |
|
Popularity |
The URL of the page on which the script was detected. |
|
Category |
|
|
Discovered On |
The date and time when this script was detected for the first time. |
|
Encrypto Currency |
The most recent time this script was observed running on the application. |
|
Resource Type |
A description of the malicious effects of the script, as analyzed by FortiAI. |
Whois
Registration details about a domain name, such as the owner, registrar, creation and expiry dates, and contact information, depending on privacy settings.
|
Field |
Description |
|---|---|
|
Registrar |
The accredited company or organization that manages the reservation of domain names and maintains the official records for those domains. |
|
Created |
The domain's date of registration. |
|
Registrant |
The individual or organization that owns or holds the registration rights to the domain name. |
|
Expiration |
The date on which the current domain registration period ends; the domain must be renewed before or shortly after this date to avoid suspension or release back to the public. |
|
Updated |
The most recent date on which the domain’s registration record was modified (for example, after renewing, changing contact information, or updating DNS). |
|
Status |
The domain’s current operational state (e.g., active, locked, suspended, pending deletion), which determines how the domain can be used or modified. |
Validation
Information that confirms the domain’s certificate is authentic and properly issued, including details about ownership, trust level, and permitted usage.
|
Field |
Description |
|---|---|
|
SSL |
Whether the domain has an SSL certificate. |
|
Validity |
The time period during which the certificate is considered valid (start and end dates). |
|
Subject |
The entity the certificate is issued to, typically including the domain name and organization details. |
|
Key Usage |
Specifies how the certificate’s public key may be used. |
|
Issuer |
The Certificate Authority (CA) that issued and signed the certificate. |
|
Basic Constraints |
Indicates whether the certificate belongs to a Certificate Authority and defines any path-length limitations for certificate chaining. |