Skip to content
Notis

Keep DNSFilter policies aligned with a public threat feed

Set a recurring check of a public feed. Airtop extracts the domains it lists, and DNSFilter adds them to the policies you specify.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Add Blocklist Domains To Policies

Adds domains to the block lists of multiple policies in one operation.

Why this helps

Manually checking a public threat feed and repeating the same policy updates can leave security lists out of date.

  • Reduce repeated browser checks of a public feed.
  • Apply listed domains to multiple named policies in one action.
  • Use a recurring schedule for the source you choose.

Setup

Build it in a few focused steps.

  • 1Connect Airtop and DNSFilter once in Notis.
  • 2Create an automation in the portal or by telling Notis what outcome you want.
  • 3In one instruction, provide the public feed URL and target DNSFilter policies, have Airtop extract only explicitly listed domains, and add those domains to the policies' blocklists.
  • 4Choose a recurring schedule and a channel for run reports.
  • 5Test with one real feed check and verify the extracted domains and policy updates.

Questions about this workflow

Can this use a threat feed that requires a login?

Only if the Airtop setup can access it. The feed URL and access method must be available to the browser workflow.

Will it infer domains from general threat commentary?

The instruction should limit extraction to domains explicitly listed in the feed. Anything ambiguous should be reported for review rather than added.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airtop to Dnsfilter. A trigger fires from one place; an action lands in another.

Airtop triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Adds an IP address to a network for filtering policies.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Allowed Application

Allows an application through a policy, regardless of other blocking rules.

ActionInstant

Get Application Category

Retrieves details about an application category.

ActionInstant

Add Allowlist Domains to Policies

Adds domains to the allow lists of multiple policies, bypassing their filtering rules.

ActionInstant

Get Billing Information

Retrieves billing records for an organization, including amounts and billing periods.

ActionInstant

Add Blacklist Category To Policy

Adds a content category to a policy’s block list without changing other settings.

ActionInstant

Get Category

Retrieves basic information about a category.

ActionInstant

Add Blacklist Domain To Policy

Blocks a domain for users covered by a policy.

ActionInstant

Connect any two apps with Notis in the middle.

Airtop and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.