If certain legitimate websites remain blocked or miscategorized after restoring the connection, use the feature within the interface. You can submit a manual correction request to update the global database or choose Submit and add to whitelist to immediately restore employee access. If you want to troubleshoot further, tell me:
The error message typically occurs when the firewall cannot reach its external categorization servers or has encountered a licensing/authorization failure . This issue is a common pain point for administrators using the GFI Kerio Control Unified Threat Management (UTM) solution. Core Issue Overview
If the error persists with "hot" status, you likely have a version between 9.2.0 and 9.2.5. Those versions had a known bug where the filter daemon would enter a STATE_HOT_RETRY loop indefinitely. Update to or higher (or 9.3.x) to resolve the hardcoded IP issue. This issue is a common pain point for
“Kerio Control Web Filter is not activated. Categorization is disabled.”
Categorization often fails due to an "Invalid Authorization" error, which usually means the Zvelo key token (valid for 21 days) has expired or cannot be refreshed. Update to or higher (or 9
It is recommended to use Cloudflare or OpenDNS (208.67.222.222) as custom DNS servers for the *.zvelo.com domains used for categorization.
categorization servers or disable the built-in reliability check that automatically deactivates the filter during network instability support.keriocontrol.gfi.com Immediate SSH Fix This issue is a common pain point for
Test connectivity via SSH or the Kerio Web Administration console by pinging ://kerio.com or ://kerio.com . 3. Synchronize System Time (NTP)
your Kerio Control appliance to force a clean token check. 2. Disable Reliability Detection via SSH
If database changes do not fix the issue, make sure your subscription can fetch a valid cloud token. Parameter to Verify Location in UI / System Required Status Action if Failing Dashboard > License Tile Active / Valid Renew subscription or contact your GFI partner. DiaServerUrl Configuration /opt/kerio/winroute/winroute.cfg via SSH Must read v4.url.zvelo.com Correct the text string if it points to outdated endpoints. Web Filter Checkbox Content Filter > Applications and Web Categories Enable Kerio Control Web Filter must be checked. Check the option and click Apply . Confirming System Health
Log into your Kerio Control appliance using an SSH client (like PuTTY) with your administrative credentials. Stop the Kerio Control service by running: /etc/boxinit.d/60kcontrol stop Use code with caution. Navigate to the update directory: cd /var/winroute/kerio-control-web-filter Use code with caution.