Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot Jun 2026

It is possible that the filter is running but has been grayed out or deactivated in your Content Rules table.

If your logs display "Invalid Authorization" errors alongside the disabled notification, your DNS configuration is blocking or dropping the Zvelo categorization queries. Navigate to > DNS in the admin console.

If stopped, start them manually. If they crash immediately, proceed to debug logs (Step 7).

SSH into the Kerio Control box (or use the web admin → Diagnostics → Shell) and run: It is possible that the filter is running

/etc/init.d/kerio-filtering start

This error indicates that Kerio Control cannot verify its license or reach the categorization servers, typically due to DNS timeouts license expiration support.keriocontrol.gfi.com Quick Fixes Check DNS Forwarders : Use reliable DNS servers like Cloudflare (1.1.1.1) or

Test internet connectivity directly from the Kerio Control console using the ping tool. 3. Manually Clear and Re-download the Web Filter Database If stopped, start them manually

Open the /opt/kerio/winroute/winroute.cfg file and confirm that the DiaServerUrl is accurately set to v4.url.zvelo.com . 4. Adjust Reliability Detection Timers

: If the filter shows "Invalid Authorization," your Zvelo token may have expired. This typically happens if the firewall cannot reach internal Kerio servers to refresh the 21-day token. GFI Support if the SSH command fails?

Older versions (pre-9.3.5 or 10.x early builds) had known issues with GFI’s cloud categorization endpoints migrating to new TLS ciphers. Verify System License Expiration Status

cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Use code with caution.

Navigate to . Click Check Now .

Go to . Check the box to Synchronize time with NTP server .

Modify the primary database setting by executing the internal query tool: ./tinydbclient "update SiteFilter set DetectReliability=0" Use code with caution. Commit and reinitialize system parameters by running: /etc/boxinit Use code with caution. 3. Verify System License Expiration Status