Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed Exclusive Review
Run the following command: /etc/boxinit.d/60kerio-webfilter restart Verify the status in the UI after a few minutes. 4. Final Verification
to disable the reliability check: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service : /etc/boxinit.d/60winroute restart Solution 2: Resolve "Invalid Authorization" DNS Issues
: Using Google DNS (8.8.8.8) can sometimes cause authorization failures with Zvelo URLs. It is recommended to use: Cloudflare : 1.1.1.1 OpenDNS : 208.67.222.222 or 208.67.220.220 .
The "categorization is disabled" status occurs when the Kerio Control engine cannot verify its license or communicate with the backend categorization service, which is powered by . This results in the filter failing to identify the nature of web traffic (e.g., social media, gambling, malware), often defaulting to a "not activated" state. Phase 1: Troubleshooting License and Activation Run the following command: /etc/boxinit
Check that the DiaServerUrl in /opt/kerio/winroute/winroute.cfg is properly set, or simply rebooting the firewall often triggers a new token request. Summary of Fixes Probable Cause Web Filter Inactive License Expired / Unchecked Check Web Filter checkbox in Content Filter "Invalid authorization" Log Zvelo Token Expired Ensure Internet stability, wait 24hrs for update "DNS response timeout" Log DNS Issues / ISP Block Change DNS to 1.1.1.1, Disable Reliability Filters not updating Connectivity Issues Check firewall rules for Zvelo traffic (HTTP/HTTPS) Conclusion
Kerio Control cannot reach the Zvelo update servers, which causes a "DNS response timeout".
Kerio Control is a popular network security solution that provides a range of features to protect organizations from various online threats. One of its key features is the web filter, which allows administrators to control and restrict access to certain websites based on their content and categorization. However, some users have reported encountering an issue where the Kerio Control web filter is not activated, and categorization is disabled. In this article, we will explore the possible causes of this issue and provide a step-by-step guide on how to fix it. It is recommended to use: Cloudflare : 1
Kerio Control does not store the categorization parameters for millions of websites locally. Instead, it issues real-time, lightweight DNS queries to cloud databases. When this error occurs, it usually traces back to three primary failure points:
The error message "Kerio Control Web Filter is not activated, categorization is disabled"
Look at the Dashboard license tile to ensure it's not in "Trial" or "Unregistered" mode. Phase 1: Troubleshooting License and Activation Check that
%%MAGIT_PARSER_PROTECT%% 3. Run the internal database command to disable the reliability safety cutoff: %%MAGIT_PARSER_PROTECT%% bash./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit%%MAGIT_PARSER_PROTECT%% ```4. the Kerio Control appliance to apply the changes. Method 2: Configure Custom DNS Forwarding for Zvelo
💡 Without a valid license, categorization stays disabled.