Block confirmed threat domains from parsed records
Bring confirmed domains from Airparser into the DNSFilter policy that protects your team.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Why this helps
Once a domain is confirmed as dangerous, translating that decision into a filtering rule can get lost in the follow-up.
- Surface confirmed domains for policy updates on a predictable schedule.
- Add a specified domain to a specified policy blocklist.
- Avoid manually copying a confirmed domain between tools.
Setup
Build it in a few focused steps.
- 1Connect Airparser and DNSFilter once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it for the threat response.
- 3Tell Notis to find Airparser records explicitly marked confirmed, identify the domain and target policy, and add that domain to the policy blocklist.
- 4Pick a recurring schedule and choose where run reports should go.
- 5Test with one real confirmed record and verify the resulting DNSFilter policy change.
Questions about this workflow
Can Notis decide on its own that a domain is a threat?
This workflow should use an explicit confirmation in the Airparser data or a decision you supply. Do not treat an unverified extraction as approval to block.
What information must be available?
The Airparser data must identify the domain and the DNSFilter policy to update. Supply either value in your instruction if it is not in the data.
What happens if no confirmed record is found?
Have Notis report that no eligible record was found and make no policy change.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Airparser to Dnsfilter. A trigger fires from one place; an action lands in another.
Airparser triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Adds an IP address to a network for filtering policies.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add Allowed Application
Allows an application through a policy, regardless of other blocking rules.
Get Application Category
Retrieves details about an application category.
Add Allowlist Domains to Policies
Adds domains to the allow lists of multiple policies, bypassing their filtering rules.
Get Billing Information
Retrieves billing records for an organization, including amounts and billing periods.
Add Blacklist Category To Policy
Adds a content category to a policy’s block list without changing other settings.
Get Category
Retrieves basic information about a category.
Add Blacklist Domain To Policy
Blocks a domain for users covered by a policy.
Connect any two apps with Notis in the middle.
Airparser and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.