/etc/init.d/keriocontrol restart
The firewall itself cannot resolve the domain names of the Kerio licensing or categorization servers.
This article addresses the common "Kerio Control Web Filter is not activated; categorization is disabled" error. This issue typically prevents the firewall from effectively blocking or allowing websites based on their category, leaving your network vulnerable or causing connectivity disruptions. Understanding the Error
Ensure no upstream router or ISP modem is blocking outbound ports 80 (HTTP) or 443 (HTTPS) specifically for the Kerio Control WAN IP address. 4. Clear the Web Filter Cache via SSH /etc/init
Fix: Kerio Control Web Filter Not Activated If your Kerio Control Web Filter shows "Not Activated" and "Categorization is Disabled," it usually means the firewall can't verify its license or reach the Kerio update servers . 1. Check Internet Connectivity
typically occurs when the firewall detects a loss of reliability in reaching the categorization servers or if there is an authorization failure with the third-party service ( Common Causes DNS Reliability Check Failure
When managing an enterprise network with , encountering the error "Kerio Control Web Filter is not activated, categorization is disabled" can severely expose your local network. This critical warning signifies that Kerio's cloud-based third-party content database (Zvelo) has stopped communicating with your firewall. Understanding the Error Ensure no upstream router or
After completing the steps:
If your internet link is slow or unstable, Kerio may proactively disable the filter. You can force it to stay active via the : SSH into your Kerio appliance.
: If online activation fails, you can download a .key file from the Kerio Product Registration page and import it via Configuration Assistant > Register product > Register offline by license file . Phase 2: Fixing Connectivity and DNS Issues the fix above applies.
When the integrated Zvelo authentication token expires, the warning logs state: DNS response 'FAILURE: Invalid authorization' to query... . If a standard license synchronization fails to clear this error, resetting the local update pointer forces the OS to re-fetch clean cryptographic tokens. Enable SSH Access
Navigate to the configuration panel in the web administration interface.
If you see "disabled" or "no license" , the fix above applies.
