Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed

Without categorization, the firewall was blind. Employees could wander into the darkest corners of the internet, and Mark’s beautifully crafted security policies were nothing more than suggestions. The Investigation

However, many administrators encounter a frustrating scenario: the Web Filter shows as or "categorization is disabled" in the Content Filter settings. When this happens, all web filtering rules based on categories cease to function, leaving your network exposed and policies unenforceable.

You must restart Kerio Control after changing these DNS settings to clear the cached status. 2. Disable "Reliability Detection" (SSH)

Ensure the for Kerio Control Web Filter is enabled and not restricted by a higher rule. 5. Check Firewall Traffic Rules Sometimes, strict egress rules block the required traffic. Go to Configuration > Traffic Rules . Without categorization, the firewall was blind

Tip: Try testing the DNS resolution by going to in Kerio Control and pinging ://kerio.com . If it fails, your DNS is the issue. 4. Review Content Filter Rules Ensure the filter is actually enabled in your ruleset. Go to Content Filter .

Run:

The internal token used to query database updates from v4.url.zvelo.com has expired (tokens refresh every 21 days). When this happens, all web filtering rules based

Web Filter categorization disabled. Serial number: ko-197974

"Invalid Authorization" errors can occur when using Google's DNS. It is recommended to use Cloudflare (1.1.1.1) OpenDNS (208.67.222.222) as custom DNS forwarding servers for *.zvelo.com Manual Re-activation Content Filter Applications and Web Categories Enable Kerio Control Web Filter is checked. to force a refresh. Verify License Status

If the error persists even after all eight fixes, contact GFI Support and attach the file from /var/log/kerio/control/ or categorization folder. Provide them with: Disable "Reliability Detection" (SSH) Ensure the for Kerio

If Kerio Control fails 10 consecutive DNS check queries within one minute, it marks the Web Filter as "not reliable" and disables it. Use these commands via SSH to disable this check and restart the service: cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Update DNS Forwarders:

: The default ISP DNS servers might be throttling requests from the filter, which makes frequent calls to services like for page ratings. License Hiccups