Skip to content
Notis

Block a suspicious destination quickly

Route a reported campaign destination to Notis with the policy to protect, then have DNSFilter block that domain.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

Why this helps

A suspicious destination can keep reaching users while someone manually finds the right DNSFilter policy and updates it.

  • Turn a specific domain report into a policy update with less context switching.
  • Keep the reported domain and action visible in run reports.
  • Require an explicit domain and policy context for each block.

Setup

Build it in a few focused steps.

  • 1Connect AimTell and DNSFilter once in the Notis portal.
  • 2Create an automation in the portal or tell Notis to create one.
  • 3In one instruction, say to block the explicitly reported suspicious domain on the specified DNSFilter policy.
  • 4Pick a webhook trigger and choose where run reports should go.
  • 5Test with one real reported domain and policy, then review the run report.

Questions about this workflow

Can this determine whether a link is malicious by itself?

This workflow blocks a domain that is explicitly reported with policy context. It does not establish whether a domain is malicious.

Can one request block the domain across multiple policies?

This action adds a single domain to a single policy. Use a different workflow or explicit process if multiple policies need updates.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link AimTell to Dnsfilter. A trigger fires from one place; an action lands in another.

AimTell triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

AimTell and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.