Description
There are times where Jamf Security Cloud (formerly RADAR) will attempt to block a site or allow a site but due to complexity of how websites work, there are many times it will not solely be one domain being reached out to. This can cause sites to not properly load or not properly be blocked as intended.
We can use Reports > Internet > Sites and Apps section of the Jamf Security Cloud Portal to get a better understanding of what is being reached out to.
Using Reports to Understand Blocked Content
Log in to the Jamf Security Cloud Portal.
Go to Reports > Internet > Sites and Apps.
Enter the name of the site excluding the .com,.net, etc. (example would be google).
Select date and time but by default it will look at the last week.
After selecting Apply in the bottom right corner, it will show all of the categories and subcategories for the site in question.
Selecting these will give a breakdown of the domains and subdomains that the site in question is reaching out to which will provide insight to determine what additional domains need to be added to the block or allow list.