Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot

Kerio Control needs to "call home" to categorize websites in real-time. If your firewall cannot reach the Kerio update servers, it will disable the filter to prevent network lag. Go to > System Health .

If the filter remains disabled after a restart or after an hour, you may need to manually reset the "Reliability Detection" via the SSH console: support.keriocontrol.gfi.com Enable SSH and navigate to Status > System Health , then click Enable SSH Access the Console

希望这篇详尽的故障排查指南能帮助您快速解决当前困境，并加强未来的网络防御能力。面对棘手的网络问题时，请记住：大多数系统行为的背后都有其设计的逻辑，它并非难以捉摸的“玄学”，而是可以通过科学的方法进行剖析与解决的工程学问题。

typically indicates a communication failure between your Kerio Control appliance and the backend categorization servers (Zvelo) Kerio Control needs to "call home" to categorize

Navigate to Content Filter > Applications and Web Categories .

[Content Filter] │ └──> [Applications and Web Categories] │ └──> [✓ Enable Kerio Control Web Filter] ──> Click [Apply]

Place this rule above any "Deny all" rules. If the filter remains disabled after a restart

Sometimes a simple reboot after changing DNS settings is required to force a new token request. 3. Advanced SSH Fix (Disable Reliability Detection)

Kerio Control includes a cloud-based or locally cached URL categorization database. Unlike simple domain blacklists, the Web Filter evaluates the content category of a requested URL (e.g., facebook.com → "Social Networking"). Firewall rules can then allow or deny traffic based on these categories.

在确保许可证和时间都正确无误后，我们来进行一些基本的功能激活检查： support.keriocontrol.gfi.com Verify Basic Activation

: Ensure your firewall can resolve external domains. It is recommended to use Cloudflare (1.1.1.1) or OpenDNS (208.67.222.222) as custom DNS servers for *.zvelo.com URLs to avoid authorization failures.

: If you use Google DNS (8.8.8.8), the filter might fail due to "Invalid Authorization" tokens. It is recommended to use Cloudflare (1.1.1.1) (208.67.222.222) for better compatibility with Zvelo. Verify Licensing

: After making DNS changes, a full reboot is often required to clear the "Invalid Authorization" status and fetch a fresh 21-day token. support.keriocontrol.gfi.com Verify Basic Activation