: Do not use Google's DNS (8.8.8.8) as the primary forwarder for *.zvelo.com .
Sometimes the link between your appliance and the cloud service becomes stale. Go to .
Large time drifts can cause certificate and token failures. Ensure the system time is synchronized. Verify Admin Settings: Navigate to Content Filter Applications and Web Categories
Navigate to the configuration directory: cd /opt/kerio/winroute . Run this command to disable reliability checks: ./tinydbclient "update SiteFilter set DetectReliability=0" Use code with caution. Copied to clipboard Restart the service: /etc/boxinit.d/60winroute restart . 3. Verify License & Module Activation : Do not use Google's DNS (8
: Ensure your Content Rules tab has the predefined rule for "Kerio Control Web Filter categories and applications" enabled.
key token (which typically expires after 21 days) or incorrect DNS forwarding settings. License Issues
The Web Filter uses SSL/TLS certificates to communicate with categorization servers. If your Kerio Control system time is incorrect, the certificate validation will fail. Go to . Large time drifts can cause certificate and token failures
Security certificates fail to validate if the appliance time is incorrect, resulting in disabled categorization. Go to > Advanced Options > Time Server . Check the Keep synchronized with NTP server box. Input a reliable time server (e.g., pool.ntp.org ).
Once the underlying connection or license issue is resolved, you must re-enable the filter:
Change your DNS forwarders to reliable public DNS servers, such as: 8.8.8.8 and 8.8.4.4 Cloudflare DNS: 1.1.1.1 and 1.0.0.1 Click Apply . Run this command to disable reliability checks:
Check the expiration date for the . If it is expired, you must renew it to restore functionality.
Before diving into fixes, confirm the exact error by navigating to:
If you have recently upgraded your Kerio Control software version, ensure your Software Maintenance Agreement (SMA) was active at the time of the software release. Running a newer version of Kerio Control on an expired SMA will permanently disable add-on features like the Web Filter. Conclusion
If SSL inspection is off, HTTPS sites may appear uncategorized.
This article addresses the common "Kerio Control Web Filter is not activated; categorization is disabled" error. This issue typically prevents the firewall from effectively blocking or allowing websites based on their category, leaving your network vulnerable or causing connectivity disruptions. Understanding the Error