Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work (720p)
The call dropped. The superintendent was mid-sentence.
What specific error code is appearing in your ?
In this article, you will learn what causes the "Kerio Control Web Filter is not activated" error, how to diagnose whether the problem stems from licensing, misconfiguration, or external factors, and the specific steps you need to take to get your Web Filter back online—including code-level fixes for the most stubborn cases.
curl -I https://licensing.gfi.com
When this happens, the Web Filter is considered "not reliable" and is automatically deactivated. This protective measure prevents the firewall from making incorrect filtering decisions based on a broken connection. However, it also leaves your network exposed until the connectivity issue is resolved.
If categorization stays disabled even after fixing DNS, you can manually reset the reliability timer:
The new AI-powered grading platform, "GradeSwift," went down. Every teacher in the building lost their progress reports. The cause? Without bandwidth categorization, a single student’s background torrent client (which he thought he’d closed) opened 8,000 concurrent connections to a seedbox in Luxembourg. Kerio, confused, treated the torrent packets with the same priority as the principal’s Zoom call with the district superintendent. The call dropped
Ensure your firewall's primary DNS server can resolve external domains.
The specific appearing in your Kerio Control Error log tab.
. This triggers a "not reliable" status, causing the web filter to disable itself to prevent blocking legitimate traffic due to a lack of data. support.keriocontrol.gfi.com Direct Solutions Wait for Automatic Reversion In this article, you will learn what causes
If the Kerio Control cannot reach the servers to authenticate, update your DNS settings. Navigate to > DNS .
Stick to reliable DNS servers for resolving threat intelligence feeds.
: The service usually attempts to revert to normal after one hour of stable connectivity. Basic Configuration Check Ensure the filter is actually enabled in the UI: However, it also leaves your network exposed until
Kerio Control sends DNS queries to check for web filter updates and authorization. If these requests fail (often 10 times in a row within 1 minute), the engine considers the filter unreliable and disables it. This frequently happens if: The internet connection is unstable or slow. Your DNS server cannot resolve .zvelo.com domains. 3. Invalid Authorization Key
This issue usually happens because of license expiration, broken communication with Kerio servers, or corrupt local database files. 1. Verify License Status