Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed Now

Poor DNS performance often causes "Invalid Authorization" errors. Configuring reliable external DNS servers for Zvelo-specific traffic is a primary fix. Navigate to section in the Kerio Control Web Admin . Enable Custom DNS forwarding .

Check your own in Kerio. Ensure there is a rule allowing the "Firewall" host itself to communicate with the "Internet" via "Any" service. Step 4: Clear the Web Filter Cache via SSH

Kerio Control has a built-in safety mechanism that disables the Web Filter if it fails to reach update servers 10 times in a row within one minute. You can override this via the SSH console : to the Kerio Control console. Navigate to the directory : cd /opt/kerio/winroute

section to ensure your license is valid and that the "Web Filter" module is included. If you have recently renewed, you may need to download the license file and register it again. support.keriocontrol.gfi.com Do you need the specific SSH commands

"Categorization is disabled"

The most common cause is an expired, unassigned, or trial-expired license for the Web Filter service.

Kerio Control is a popular network security solution that provides comprehensive protection for small and medium-sized businesses. One of its key features is the web filter, which allows administrators to control and monitor internet access for users on the network. However, some users have reported an issue where the Kerio Control web filter is not activated, and categorization is disabled. In this article, we will explore the causes of this issue and provide a step-by-step guide on how to fix it.

"Invalid Authorization" errors can occur when using Google's DNS. It is recommended to use Cloudflare (1.1.1.1) OpenDNS (208.67.222.222) as custom DNS forwarding servers for *.zvelo.com Manual Re-activation Content Filter Applications and Web Categories Enable Kerio Control Web Filter is checked. to force a refresh. Verify License Status

| Item | Expected Status | |------|----------------| | License → Web Filter | Licensed | | Web Filter → Categorization | Enabled (green) | | Last update | Within 24 hours | | Test a known category | e.g., facebook.com → Shows Social Networking | Enable Custom DNS forwarding

If the issue is caused by intermittent DNS timeouts, you can disable the reliability check via the SSH console Connect to the console (e.g., using Putty). Navigate to the directory: cd /opt/kerio/winroute Run the command: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service: /etc/boxinit.d/60winroute restart Adjust DNS Forwarding

Kerio Control must resolve specific external domains to check licenses and fetch categorization data. If your firewall is using faulty upstream DNS servers, it cannot find the cloud categorization engines. Navigate to > DNS .

No categorization data appears in traffic logs.

This step is a workaround for cases where DNS timeouts cause the system to falsely mark the web filter as unreliable. Instead of fixing the underlying DNS latency issue, it tells Kerio Control to ignore these timeouts. Step 4: Clear the Web Filter Cache via

Web Filter categorization disabled. Serial number: ko-197974

Go to to check the status of the "Web Filter" module.

The Kerio Control Web Filter uses real-time cloud lookups (powered by Webroot/BrightCloud) to categorize websites. If the firewall cannot resolve these cloud server addresses, categorization is automatically disabled.

Tip: Try testing the DNS resolution by going to in Kerio Control and pinging ://kerio.com . If it fails, your DNS is the issue. 4. Review Content Filter Rules Ensure the filter is actually enabled in your ruleset. Go to Content Filter . Go to Content Filter .