Skip to content
Notis

Carry a reviewed threat list across policies

Submit the approved domains and intended policies once. Notis can gather context and request a bulk DNSFilter blocklist update.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Add Blocklist Domains To Policies

Adds domains to the block lists of multiple policies in one operation.

Why this helps

A threat response slows down when the same domain list must be entered into several policies by hand.

  • Reduce repetitive blocklist updates
  • Apply a reviewed list across multiple policies
  • Keep the request and outcome together

Setup

Build it in a few focused steps.

  • 1Connect AgentQL and DNSFilter once in the Notis portal.
  • 2Create an automation and name it Block Threat Domains Across Policies.
  • 3Tell Notis to use AgentQL to gather context about the submitted domains, then add them to the specified DNSFilter policy block lists only when the request confirms the domains are reviewed threats.
  • 4Choose the Notis webhook trigger and choose where run reports should go.
  • 5Test with one confirmed threat domain and the intended policies.

Questions about this workflow

Will the workflow independently decide that a domain is a threat?

No. AgentQL research is supporting context. The instruction should require the request to confirm the domains are reviewed threats before applying a block.

Can this target more than one policy?

Yes. The action is described as adding domains to multiple policies at once.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agentql to Dnsfilter. A trigger fires from one place; an action lands in another.

Agentql triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Agentql and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.