Before troubleshooting the configuration, ensure your license is active. Go to -> Dashboard . Click on License .
: Authorization tokens for categorization expire every 21 days. If they fail to renew due to blocked traffic, categorization will disable.
nslookup mcafee.url.cloud.gfi.com
Before diving into fixes, it is important to understand why this error occurs. The is the intelligent engine behind your content filtering rules. Whenever Kerio Control processes a URL rule that requires classification of pages—such as blocking all "Social Media" sites—the Web Filter is activated to place that site into its appropriate category. This categorization database is supplied by industry leaders in web filtering, and Kerio Control relies on a valid license, stable internet connectivity, and proper DNS resolution to access it. : Authorization tokens for categorization expire every 21
: The Web Filter relies on reaching v4.url.zvelo.com .
Leo leaned back. The Kerio box hummed quietly. It wasn't fixed. It was working —despite being broken. And sometimes, that’s the best a sysadmin can hope for.
or did this start happening suddenly? Share public link The is the intelligent engine behind your content
Troubleshooting Kerio Control: "Web Filter is Not Activated, Categorization is Disabled"
Restart the service using: /etc/boxinit.d/60winroute restart . 4. Check for Proxy Conflicts
Subscription renewal is necessary for Web Filter to function. Corrupted/Invalid Authorization: Expired Zvelo token (expires every 21 days) or corrupted winroute.cfg support.keriocontrol.gfi.com 2. Immediate Workarounds & Fixes A. Fix DNS and Connectivity Change DNS Servers: Ensure your DNS servers are robust. Cloudflare ( ) or OpenDNS ( 208.67.222.222 ) are recommended for better *.zvelo.com resolution. Restart Kerio Control: A simple reboot often restores functionality. support.keriocontrol.gfi.com B. Fix "Categorization is Disabled" via SSH the system refuses to filter traffic.
However, administrators occasionally encounter a frustrating problem. Despite enabling web filtering, the system refuses to filter traffic. The dashboard or logs repeatedly state:
The Kerio Control Web Filter requires an active, separate add-on license component. If your subscription lapses or fails to sync with GFI registration servers, the engine defaults to a disabled state. 🔧 Step-by-Step Fixes and Workarounds Step 1: Turn Off Link Reliability Detection (SSH Method)