Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot __full__ Guide

This error typically indicates that your Kerio Control Web Filter has lost its connection to the Zvelo categorization servers or its license authorization has failed . This often happens due to DNS resolution timeouts or expired authorization tokens. Direct Solutions DNS Stability (Most Common) :Kerio Control disables the Web Filter if it fails 10 consecutive DNS checks within one minute. Set your custom DNS forwarding servers for *.zvelo.com to Cloudflare ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ). Avoid using only Google DNS (8.8.8.8) as it can sometimes cause these authorization failures. SSH "Hot-fix" to Restore Service :If the filter is stuck in a "disabled" state, you can manually reset it and disable the "Reliability Detection" that triggers the shutdown via SSH : Access the Kerio Control console via SSH. Run the following commands: cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Use code with caution. Copied to clipboard Check License & Maintenance :The Web Filter requires a separate module license. Verify your Software Maintenance has not expired; if it has, the filter will stop receiving updates and eventually deactivate. Ensure the DiaServerUrl in /opt/kerio/winroute/winroute.cfg is correctly set to v4.url.zvelo.com . Verification Steps Go to Content Filter > Applications and Web Categories . Ensure Enable Kerio Control Web Filter is checked. Use the Test URL tool to see if categorization is live again. If you'd like, I can help you: Walk through SSH access if you're unfamiliar with the console. Check your License status within the Kerio interface. Configure specific DNS forwarding rules to prevent this from happening again. Let me know which step you'd like to try first. Web Filter categorization disabled. Serial number: ko-197974

To resolve the issue where the Kerio Control Web Filter is reported as not activated and categorization is disabled, you typically need to address underlying DNS or authorization issues . This error often occurs when the firewall cannot reach the Zvelo categorization servers. Immediate Fixes Restart Kerio Control : In many cases, a simple reboot restores connectivity and reactivates the filter automatically. Manual Activation : Ensure the filter is checked in the administration interface under Content Filter > Applications and Web Categories . Troubleshooting DNS and Authorization The "categorization disabled" state is often a reliability safety measure triggered after multiple failed DNS queries. Configure Custom DNS Forwarding : Go to DNS in the admin interface. Enable custom DNS forwarding for *.zvelo.com . Set the DNS servers to Cloudflare ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ), as Google's DNS can sometimes cause authorization token issues. Check for Expired Tokens : Zvelo key tokens expire every 21 days. If your firewall has been offline or has incorrect time settings, it may fail to update this token. Advanced CLI Solution (If Reliability Check is Stuck) If the filter remains disabled after a restart, you can manually reset the reliability detection via SSH : Login to the console via SSH. Navigate to the directory: cd /opt/kerio/winroute . Run the following command to disable the reliability check: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service: /etc/boxinit.d/60winroute restart . Note: If your 30-day trial has expired, these options will be greyed out and unavailable until a valid license is applied. Web Filter categorization disabled. Serial number: ko-197974

Kerio Control: Web Filter Not Activated & Categorization Disabled Issue Overview When managing web traffic filtering in Kerio Control, you may encounter the following status indicators:

Web Filter: Not activated Categorization: Disabled This error typically indicates that your Kerio Control

As a result, web filtering rules based on URL categories (e.g., Social Media, Streaming, Adult Content) will not work. Users may be able to access all websites regardless of configured policies. Root Causes This issue typically occurs due to one of the following:

Missing or expired license – The Web Filter module requires a valid subscription. Categorization service not started – The background service that downloads and applies URL categories is stopped. No internet access on the Kerio Control host – The appliance cannot contact Kerio’s cloud categorization servers. DNS resolution failure – The server cannot resolve licensing.kerio.com or categorization.kerio.com . Outdated Web Filter database – The local categorization database is missing or corrupted.

Step-by-Step Resolution Step 1: Verify License Status Set your custom DNS forwarding servers for *

Log into Kerio Control Admin Interface . Go to Licenses → License Information . Check if Web Filter is listed and Active . If expired or missing:

Purchase or renew a license from your Kerio/GfI distributor. Upload the new license file (.LIC) manually.

Step 2: Activate Web Filter Module

Navigate to Web Filter → Settings . Check the box: Enable Web Filter . Under Categorization , enable Use URL categorization . Click Apply .

Step 3: Check Categorization Service Status Via Admin Interface: