Hot — Kerio Control Web Filter Is Not Activated Categorization Is Disabled

(208.67.222.222). Avoid using Google DNS (8.8.8.8) for Zvelo lookups as it can cause authorization failures support.keriocontrol.gfi.com Restart the System

As mentioned, Kerio Control uses Zvelo's infrastructure. The communication is secured with an authorization token. These tokens have a limited lifespan and must be renewed periodically.

Security certificates require accurate system time to validate the connection between your firewall and the Kerio servers.

To avoid this error in the future:

Your firewall automatically disables categorization when backend synchronization loops fail. The security framework relies on persistent, low-latency lookups to classify active browsing sessions. The primary causes for this specific disruption include:

: Navigate to Configuration > Content Filter . Check your custom content rules; if they were grayed out during the outage, they will return to their functional colored status.

nslookup license.gfi.com

Enable SSH access in .

Check → Advanced → Date & Time .

rm -rf /var/kerio/kerio-control/cache/urlfilter/ These tokens have a limited lifespan and must

Kerio Control needs to communicate with the external categorization service to function.

Check your DNS settings; if the firewall can't resolve ://kerio.com , the filter will fail. Sync the System Time

Troubleshooting "Kerio Control Web Filter is Not Activated / Categorization is Disabled" Check your DNS settings

The Web Filter requires an active, paid subscription. If your Kerio Control Software Maintenance (Sub) expires, the categorization engine shuts down.