Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work · Latest & Validated

Kerio Control: Fixing "Web Filter is Not Activated" and "Categorization is Disabled"

Introduction: The Frustration of a Broken Filter

For network administrators relying on Kerio Control (now part of GFI Software), few error messages are as confusing and disruptive as seeing your web filter refuse to work. You navigate to the Web Filter section of the admin interface, expecting to see traffic being categorized and blocked according to your policies. Instead, you are greeted by a greyed-out dashboard, inactive rule sets, and the dreaded status indicators:

This effectively neuters your firewall’s ability to block social media, malware domains, or adult content. Without categorization, your URL rules become useless. This article provides a deep-dive into why this happens and a step-by-step guide to reactivating the filter. Kerio Control: Fixing "Web Filter is Not Activated"

Step 2: Check Internet Connectivity

Kerio Control needs to "phone home" to the categorization servers (typically webfilter.kerio.com or similar endpoints) to download category lists.

  1. Go to Status > Interfaces.
  2. Ensure the WAN interface is online and connected.
  3. Open a command prompt (or the built-in terminal if available via SSH) and attempt to ping a public domain: ping google.com
  4. If DNS is failing, the categorization service will fail. Ensure your DNS settings in Configuration > DNS are correct (try using Google DNS 8.8.8.8 or Cloudflare 1.1.1.1 if the ISP DNS is unresponsive).

Overview

Kerio Control (now part of GFI Software) is a unified threat management (UTM) firewall. Its Web Filter module provides content filtering based on URL categorization. When the system shows that the Web Filter is not activated and categorization is disabled, the appliance cannot block or allow websites based on their content type (e.g., social media, adult content, gambling). Instead, it falls back to basic domain or IP-based rules. This effectively neuters your firewall’s ability to block

Step-by-Step Resolution

Resolution 4: Re-activate via License Reinstall

Even if your license shows as valid, the activation token may be corrupted.

Fix:

  1. Go to Configuration > License.
  2. Click Remove License.
  3. Reboot Kerio Control completely.
  4. Upload your license file again or enter your license key.
  5. Go to Web Filter > click "Activate Web Filter" (if the button exists).

Option B: Switch to Static URL Lists (Temporary Workaround)

While categorization is disabled, you can still filter using Static URL Lists.