Skip to content
Notis

Apply confirmed threat domains across policies

Carry one confirmed domain decision across the DNSFilter policies that need protection.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Add Blocklist Domains To Policies

Adds domains to the block lists of multiple policies in one operation.

Why this helps

A confirmed malicious domain can be blocked in one policy while other relevant policies are missed.

  • Apply a confirmed domain across specified policies in one action.
  • Reduce repetitive policy updates.
  • Use a scheduled review to catch records that need follow-up.

Setup

Build it in a few focused steps.

  • 1Connect Airparser and DNSFilter once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it for multi-policy threat blocking.
  • 3Tell Notis to find explicitly confirmed malicious domains in Airparser data and add them to the specified DNSFilter policies.
  • 4Pick a recurring schedule and choose where run reports should go.
  • 5Test with one confirmed domain and verify each intended policy.

Questions about this workflow

Which policies will be changed?

Name the target policies in the instruction or Airparser data. Notis should not guess the policy set.

Does this action block unconfirmed domains?

It should only run for domains explicitly marked as confirmed according to your process.

What if a record has several domains?

Specify how to handle multiple domains and test with a representative record before relying on the automation.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airparser to Dnsfilter. A trigger fires from one place; an action lands in another.

Airparser triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Airparser and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.