Integrity

The integrity metric is the combined and weighted result of the individual integrity checks performed on each DNS server and provides an indicator of the overall integrity of the zone and DNS servers. Depending on the plan used for the domain in question, the metric is calculated from the result of the checks listed below.

The integrity entity is presented as a number between 0 and 100%. The trigger levels for each event is shown below. In normal circumstances the severity events will follow the outline below, but note the exceptions! The lowest integrity score (or the highest severity) from all locations is displayed on the dashboard.

EXCEPTIONS!

An ERROR event will be triggered if any of the following validation checks fails: NS IP, CAA, MX, DS, DNSSEC and any Resource record check. The reason for this is to alert that changes have been made to the monitored zone content. The monitoring system is unable to know if the changes discovered are malicious or intentional.

Event severities

No integrity anomalies are found during the check run.

Warning events are usually caused by discrepancies in SOA Serial numbers or Master Names between the different authoritative servers. Read more about the messages in the respective check section.

An error Event is usually triggered by multiple mismatches between name servers but could also indicate that a host record has been changed. Check the messages for further information and take appropriate action.

Event messages

Messages are compiled from the underlying checks. Please refer to the messages under each check.