Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed Instant

This error often occurs because the Zvelo key token, which expires every 21 days, has failed to renew. Check DNS Forwarders:

Go to DNS settings and configure Custom DNS forwarding for *.zvelo.com to use Cloudflare ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ).

If the Kerio Control web filter is not activated, and categorization is disabled, you may notice the following symptoms:

Enable SSH access in Kerio Control via .

(Note: Depending on your version, you may use service winroute stop or /etc/init.d/winroute stop ) Navigate to the Web Filter cache directory: cd /var/winroute/kerio/cef Use code with caution. Remove the corrupted database or cache files: rm -rf * Use code with caution. Restart the Kerio Control engine: /etc/boxinit.d/60winroute start Use code with caution. This error often occurs because the Zvelo key

grep "categorization" /var/log/kerio/access.log | tail -5

Go to to check the status of the "Web Filter" module.

"Invalid Authorization" errors often stem from expired Zvelo key tokens. It is recommended to use reliable DNS servers like Cloudflare (1.1.1.1) (208.67.222.222)

If the license is active but showing an error, click to force a sync with the GFI/Kerio activation servers. (Note: Depending on your version, you may use

The firewall cannot resolve the hostname of the Kerio licensing and categorization servers.

Check the box to and click Edit (or Add). In the DNS name field, enter exactly: *.zvelo.com

Go to . Ensure DNS forwarding is configured properly and that the firewall itself can resolve external queries. Step 3: Check Time Synchronization (NTP)

: Using Google DNS (8.8.8.8) can sometimes cause authorization failures with Zvelo URLs. It is recommended to use: Cloudflare : 1.1.1.1 OpenDNS : 208.67.222.222 or 208.67.220.220 . grep "categorization" /var/log/kerio/access

If Kerio Control fails 10 consecutive DNS check queries within 1 minute, it considers the Web Filter "unreliable" and disables it automatically. support.keriocontrol.gfi.com Fix via SSH cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Use code with caution. Copied to clipboard

When you see this warning in your (usually under Dashboard or Security logs), it means the system cannot reach the third-party classification services—specifically Zvelo —or the license authorization is failing. Common Symptoms: Users can access websites that should be blocked. Internet connectivity may be intermittent or slow.

A common issue in Kerio Control is seeing the status "Web Filter is not activated, and categorization is disabled"

Check the status of Kerio cloud services to see if the issue is on their end. If you are still experiencing issues, AI responses may include mistakes. Learn more Share public link

Run the following command: /etc/boxinit.d/60kerio-webfilter restart Verify the status in the UI after a few minutes. 4. Final Verification