This may have already been answered but anyone know of a good method to monitor dnssec specifically? We had a DNS outage last week and xymon monitoring of all records and NS servers we had in place reported no issues or loss. Root cause was dnssec only was not passing (anchor issues, >512 fragmentation, etc)

thx in advance, Danny