Skip to content
Notis

Block confirmed suspicious document domains

Route confirmed suspicious domains from document review into a focused DNSFilter blocklist update.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

Why this helps

Security findings in document workflows can be left in notes while a separate policy update waits for attention.

  • Connects confirmed findings to a concrete DNSFilter blocklist action.
  • Keeps the policy target explicit in the automation instruction.
  • Creates a scheduled review point for document workflow findings.

Setup

Build it in a few focused steps.

  • 1Connect Affinda and DNSFilter once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a name and prompt.
  • 3In one instruction, ask Notis to add only explicitly confirmed suspicious domains from Affinda records to the specified DNSFilter policy blocklist.
  • 4Pick a recurring schedule and choose where run reports should go.
  • 5Test with one real record that includes a confirmed suspicious domain and target policy.

Questions about this workflow

Does Affinda itself confirm a domain is malicious?

This workflow depends on the Affinda data exposing an explicit suspicious finding. If it does not, provide a confirmed domain or do not run the blocklist update.

Can the workflow choose which policy to update?

Only when the policy is identified in the available data or instruction. Specify the intended DNSFilter policy before testing.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Affinda to Dnsfilter. A trigger fires from one place; an action lands in another.

Affinda triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Affinda and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.