Blog

Kerio Control Web Filter — Is Not Activated Categorization Is Disabled Work !!hot!!

The error "Kerio Control Web Filter is not activated" typically occurs when the firewall loses communication with its categorization servers (Zvelo), or if the special module license has lapsed. Common Fixes Check Licensing:

: If it doesn't restore, you can disable the reliability check via SSH using these GFI Support instructions: SSH into your Kerio Control console. Navigate to: cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service: /etc/boxinit.d/60winroute restart support.keriocontrol.gfi.com 2. DNS Resolution Issues If Kerio cannot resolve *.zvelo.com or other update URLs, categorization will fail. support.keriocontrol.gfi.com : Set a custom DNS forward for *.zvelo.com to use reliable public servers like Cloudflare 208.67.222.222 ) in the DNS section of the admin interface. support.keriocontrol.gfi.com 3. License and Token Expiration Module License The error "Kerio Control Web Filter is not

If it’s a new installation, it behaves as a trial for 30 days before automatically disabling. Verify DNS Servers: Attempt 3 automated re-enable attempts over 10 minutes,

for a different version of Kerio Control, or help checking your license status in the GFI portal? Technical Support Specialist Systems Administrator Using Kerio Control Web Filter Command & Control

By verifying your license status, ensuring your DNS and WAN connections are stable, and checking the Advanced Options to ensure the service is enabled, you can quickly restore security and filtering to your network environment.

Restart the service using: /etc/boxinit.d/60winroute restart. 4. Check for Proxy Conflicts

Default behavior (reasonable assumptions)

  • Attempt 3 automated re-enable attempts over 10 minutes, then switch to fallback policy.
  • Notify primary admin immediately and escalate after 30 minutes.
  • Keep web access blocked for categories: Malware, Phishing, Command & Control, Adult.