The Kerio Control Web Filter requires a specific license module. If the license expires or you are using a trial version past 30 days, categorization will be disabled automatically.
The appliance must reach GFI's cloud categorization servers on .
Common error lines:
This typically happens because:
: If you're unable to resolve the issue through self-troubleshooting, consider reaching out to GFI's technical support team for assistance.
The error "Kerio Control Web Filter is not activated. Categorization is disabled" is almost always solvable by methodically checking . In 90% of cases, either a expired license, a local DNS misconfiguration, or a corrupted cache is to blame.
We recommend using reliable public resolvers like Google DNS ( 8.8.8.8 and 8.8.4.4 ) or Cloudflare ( 1.1.1.1 ). The Kerio Control Web Filter requires a specific
Set your custom DNS forwarding servers for *.zvelo.com to ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ). Avoid using only Google DNS (8.8.8.8) as it can sometimes cause these authorization failures.
cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Use code with caution. Copied to clipboard
这是一种更为高级的操作方式，涉及到 Kerio Control 在底层的可靠性检测机制。当系统因为瞬间的网络抖动导致 DNS 连续超时后，它会认定网络不可靠，并主动禁用 Web 过滤功能。即便一小时后网络恢复，它也可能无法自动重新激活。 Common error lines: This typically happens because: :
Go to . Check the box to Synchronize time with NTP server .
At its heart, Kerio Control's Web Filter relies on a third-party service, currently provided by , to maintain a dynamic, real-time database of website categorizations. When a user requests a webpage, the firewall sends a query to this service. The service responds with the page's category (e.g., "Social Networking," "Streaming Media," "Productivity"). Based on this rating and your predefined content rules, Kerio Control either allows or denies the connection.