+APP.3.6.A7 Monitoring of DNS Servers (B)

APP.3.6.A7 Monitoring of DNS Servers (B)

DNS servers must be monitored continuously. In particular, DNS server load MUST be monitored in order adapt the performance capacity of the hardware in good time. DNS servers MUST be configured in such a way that at least the following security-relevant events are logged:

  • number of DNS requests
  • number of errors in DNS requests
  • errors in extension mechanisms for DNS (EDNS)
  • expiring zones
  • failed zone transfers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources