Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work Instant
| Preventive Measure | Why | |--------------------|-----| | Set up monitoring alerts | Receive email notification if categorization stops. | | Regularly check license expiry | Add a calendar reminder 30 days before renewal. | | Use redundant DNS servers | Prevents single-point-of-failure resolution issues. | | Document upstream proxy changes | Any proxy change requires updating Kerio. | | Test after updates | Category servers change IPs; test every quarter. |
When a user attempts to access a web page, Kerio Control sends a request to Zvelo's classification database to obtain the page's category. Based on this classification, the user is either allowed or denied access. The filter relies on:
: A full disk can prevent the license file from saving. Use SSH to check disk space and clear cache files in /var/lib/firebase if necessary. 4. Troubleshooting Miscategorized or Blocked Sites
If the issue persists after trying the above steps, you can try: | Preventive Measure | Why | |--------------------|-----| |
If you are running an older, unpatched version of Kerio Control (prior to version 9.4.2), you might be affected by the shutdown of Cyren, the legacy vendor Kerio used for URL categorization.
If a simple restart doesn't fix it, follow these steps to restore functionality: 1. Resolve Connectivity & Reliability Issues
If the above steps do not work, check the tab. Look for errors related to Invalid authorization or DNS response FAILURE . This will tell you if the issue is a licensing problem (invalid key) or a connectivity problem (DNS fail). Best Practices to Avoid Future Deactivation | | Document upstream proxy changes | Any
Your current and product software version.
I can provide specific commands or steps based on your current setup. Share public link
: In many cases, Kerio Control will automatically attempt to revert to normal operation after if the connection is restored. SSH Fix (Manual Reset) Based on this classification, the user is either
The error message means your firewall cannot connect to the cloud database to classify websites, leaving your network vulnerable. When this occurs, Kerio Control defaults to a fail-safe mode, allowing users to access potentially malicious or unauthorized sites because it cannot determine their category.
Are you seeing any specific (like "Invalid Authorization" or "DNS response timeout") in the Error or Debug logs? Using Kerio Control Web Filter - KerioControl - GFI