Skip to content
Notis

Carry confirmed threat reports into DNSFilter

Turn a clearly identified and approved threat domain in a customer case into a targeted DNSFilter blocklist update.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

Why this helps

Security details in customer cases can be overlooked when someone must separately copy a domain into a filtering policy.

  • Reduce re-entry of confirmed threat domains.
  • Keep a block focused on the policy named in the case.
  • Get a run report showing what was processed.

Setup

Build it in a few focused steps.

  • 1Connect Agile CRM and DNSFilter once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a clear name.
  • 3In one instruction, ask Notis to use the webhook case details and add a domain to the named DNSFilter policy only when the report explicitly identifies it as confirmed and approved for blocking.
  • 4Pick the webhook trigger and choose where run reports should go.
  • 5Test with one real, approved case and verify the policy and domain.

Questions about this workflow

Will Notis decide whether a domain is malicious?

No. The workflow should only act on an explicit confirmation and approval in the supplied case details. DNSFilter's Suggest Domain Threat action is not used by this workflow.

Can it block a domain across multiple policies?

This workflow uses the single-policy action. The case details should name the policy; if they do not, the instruction should ask Notis to stop and report the missing information.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agile CRM to Dnsfilter. A trigger fires from one place; an action lands in another.

Agile CRM triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Agile CRM and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.