Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot |best| -
Ensure its value is explicitly set to the official cluster: v4.url.zvelo.com . Save the file changes and restart the system. 4. Verify License Subscriptions and Trial Status
If your configuration configuration file ( winroute.cfg ) points to an incorrect update address, authorization tokens cannot renew. Establish an SSH connection to your firewall appliance. Open the configuration file using a text editor: nano /opt/kerio/winroute/winroute.cfg Use code with caution. Locate the variable named .
The message "Web Filter categorization is disabled" usually occurs when Kerio Control loses its connection to the
The error message indicates that your Kerio Control firewall has suspended its cloud-based URL classification engine. When this occurs, user traffic bypasses your configured content restrictions, allowing unrestricted access to potentially dangerous or unauthorized web pages.
Verify that there is a rule allowing the itself to access the Internet via Any service (or at least HTTP, HTTPS, and DNS). Ensure its value is explicitly set to the
Ensure your primary and secondary DNS forwarders are operational (e.g., Google DNS 8.8.8.8 or Cloudflare 1.1.1.1 ).
Restart the winroute service: /etc/boxinit.d/60winroute restart .
Are you currently facing this error on a or a virtual machine ? Using Kerio Control Web Filter - KerioControl - GFI
If the DNS and connectivity issues are intermittent (e.g., a temporary ISP problem), the firewall may have disabled itself and not recovered. You can force it back into service by disabling the automatic reliability check. Verify License Subscriptions and Trial Status If your
: This often stems from an expired Zvelo token (which typically expires after 21 days). If the appliance cannot fetch a new token from Kerio’s internal servers, the filter remains inactive.
: Ensure that the web filter is enabled. Look for a checkbox or a toggle switch that activates the web filter. If it's not activated, enable it.
: The Web Filter requires a specific license. If your license has expired or you are past the 30-day trial, the categorization features will be automatically disabled. support.keriocontrol.gfi.com Advanced Troubleshooting (via SSH)
I can provide more targeted commands and steps to permanently resolve the connectivity conflict. Locate the variable named
The firewall uses security tokens to communicate with *.zvelo.com . These tokens expire every 21 days. If a renewal request fails due to bad routing or upstream blocking, you will see an "Invalid Authorization" alert in your error logs.
For system administrators and IT professionals relying on to secure their network, the Web Filter is not activated alert is an immediate red flag. This error signifies that the firewall's ability to inspect, categorize, and filter web content based on URL ratings is compromised. When this module fails, your carefully constructed content filtering policies become ineffective, leaving the network potentially vulnerable and users with unrestricted access to all websites.
Log into Kerio Control via SSH and run the following command to turn off Reliability detection: cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit 5. Check Content Filter Rules Configuration