Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot Info

The message "Web Filter categorization is disabled" usually occurs when Kerio Control loses its connection to the

rating servers or detects a reliability issue with the DNS response support.keriocontrol.gfi.com Immediate Fixes Restart the Engine

: Often, simply restarting the Kerio Control engine or the entire appliance restores internet access and re-activates the filter. Check DNS Forwarders

: If you use Google DNS (8.8.8.8), the filter might fail due to "Invalid Authorization" tokens. It is recommended to use Cloudflare (1.1.1.1) (208.67.222.222) for better compatibility with Zvelo. Verify Licensing

: The Web Filter requires a specific license. If your license has expired or you are past the 30-day trial, the categorization features will be automatically disabled. support.keriocontrol.gfi.com Advanced Troubleshooting (via SSH)

If the filter remains disabled, it may be due to "Reliability Detection" shutting it down after too many failed DNS queries. You can disable this check manually: Log in to the console Navigate to the installation directory cd /opt/kerio/winroute Disable Reliability Detection and reset the timers by running: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service /etc/boxinit.d/60winroute restart support.keriocontrol.gfi.com Essential Settings to Check Enable the Filter : Ensure the box is actually checked under Content Filter > Applications and Web Categories Content Rules

: Verify that you have at least one rule that utilizes "Applications and Web Categories." The filter often only activates when a rule specifically asks for a category classification. The message "Web Filter categorization is disabled" usually

: Ensure your system time is accurate and synchronized with an NTP server, as mismatched times can cause license and certificate errors. GFI Support exact SSH commands

for a specific version of Kerio Control, or do you need help verifying your license status

Web Filter categorization disabled. Serial number: ko-197974

Kerio Control Web Filter Not Activated: Categorization Disabled

Issue Overview

The Kerio Control web filter is a crucial component of the Kerio Control software, which provides comprehensive internet security and content filtering for organizations. However, in this case, the web filter is not activated, and categorization is disabled, which can lead to security vulnerabilities and reduced productivity. Configuration errors : Misconfiguration of the Kerio Control

Possible Causes

Some possible causes of this issue include:

• Configuration errors: Misconfiguration of the Kerio Control software or the web filter settings may have led to the deactivation of the web filter and categorization.
• Software updates or changes: Recent software updates or changes to the Kerio Control configuration may have caused the web filter to become disabled.
• Security policies: Changes to security policies or rules may have inadvertently disabled the web filter and categorization.

Consequences

The consequences of having an inactive web filter and disabled categorization include:

• Unrestricted internet access: Users may have unrestricted access to the internet, which can lead to security risks, such as malware infections and data breaches.
• Inappropriate content access: Without categorization, users may have access to inappropriate content, such as adult or violent websites, which can be distracting and affect productivity.
• Non-compliance: Organizations may be non-compliant with regulatory requirements and industry standards, such as GDPR, HIPAA, or PCI-DSS.

Recommendations

To resolve this issue, we recommend:

• Activating the web filter: Enable the web filter and configure it to block or allow specific categories of websites.
• Enabling categorization: Enable categorization to ensure that websites are properly categorized and filtered.
• Reviewing security policies: Review and update security policies and rules to ensure that they align with organizational requirements.
• Regular monitoring: Regularly monitor the Kerio Control software and web filter to ensure that they are functioning correctly.

Best Practices

To prevent similar issues in the future, we recommend:

• Regular software updates: Regularly update the Kerio Control software to ensure that you have the latest security patches and features.
• Configuration backups: Regularly back up Kerio Control configurations to ensure that you can quickly restore settings in case of an issue.
• Security audits: Perform regular security audits to identify and address potential security vulnerabilities.

What Does "Categorization is Disabled" Mean?

When categorization is disabled, Kerio Control cannot assign a category to any requested URL. Consequently:

• Rules using "Web Filter" as a condition are ignored.
• The firewall falls back to basic allow/deny rules based on IP addresses, ports, or raw domains if defined.

In most configurations, this leads to either:

• Overly permissive access (if your default rule is Allow) – users can visit blocked categories.
• Overly restrictive access (if your default rule is Deny) – legitimate business sites get blocked.

6. Check for Firewall Rules Blocking Kerio Itself

• Kerio Control must allow its own outbound traffic to cloud services on port 443.
• Create an explicit rule (if very restrictive) allowing source = Kerio IP, destination = webfilter.kerio.com, service = HTTPS.

Part 1: Understanding the Error

Step 6: Restart Kerio Control Services

Sometimes a full restart resolves stuck services:

1. Go to Status → Services.
2. Click Restart all services (short downtime expected).

Alternatively, via CLI:

/opt/kerio/mailserver/kerio-control restart

Step 1: Verify License Status

1. Log into Kerio Control Admin Interface.
2. Go to Licenses → License Information.
3. Check if Web Filter is listed and Active.
4. If expired or missing:
   • Purchase or renew a license from your Kerio/GfI distributor.
   • Upload the new license file (.LIC) manually.

Preventive steps

• Monitor license expiry dates and set reminders for renewals.
• Configure health checks or alerts for the Web Filter service and category updates.
• Ensure redundant DNS and reliable internet access for cloud categorization services.
• Apply scheduled maintenance and keep Kerio Control updated with vendor patches.
• Document configuration and change management to track administrative changes.