External network discovery allows to automatically detect all certificates on your public-facing domains.

To start an external network discovery, create a scan profile:

  1. Open Discovery page and create a new profile.
  2. Choose “external” scan profile type, indicate domain name and include subdomain if you need it.
  3. Set all ports that you want to scan separated by a comma or by using a dash. We recommend using port 443. If you leave that field without any notes, GlobalSign CIT checks only default ports.
  4. Schedule regularity of refreshing scan results if you want to refresh the certificate list on a daily or weekly basis.

Here's what you can do with scan profile:

  • create multiple scan runs for different profile targets and ports
  • include or exclude subdomains (available for all pricing plans except the free one)
  • schedule scan runs
  • edit or delete the scan profile anytime

Find this module and set up everything related to it at https://www.cit.GlobalSign.com/discovery/external

Learn How to run an internal scan.