Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work !!top!! Jun 2026
As mentioned by users, ensuring stable DNS resolution is crucial for the Zvelo service to check categorized URLs without failure 1.2.1.
This issue is typically caused by , expired authentication tokens , or network reliability checks failing multiple times in a row. Use the following guide to troubleshoot and implement workarounds. 1. Immediate Workaround: Disable Reliability Detection
Visit the official Kerio Control Knowledge Base or the GFI Community Forums. Always include your debug logs (Diagnostics → Generate Support Info) when seeking vendor support.
: Temporarily route your WAN DNS forwarders through a secure upstream provider like Cisco Umbrella or CleanBrowsing to filter out bad categories at the DNS level. As mentioned by users, ensuring stable DNS resolution
Web Filter categorization disabled. Serial number: ko-197974
This procedure requires access to the Kerio Control console via SSH and a direct edit of the configuration database. It should be performed with caution and ideally outside of business hours, as the final command restarts the firewall service, causing a brief network interruption.
If you are behind a strict firewall, you may need to Register Offline by downloading the license key file from the GFI portal. Common Root Causes : Temporarily route your WAN DNS forwarders through
The Kerio appliance must resolve sessions.gfi.com and licensing.gfi.com .
: Hold Shift while clicking Status > System Health in the admin interface and click Enable SSH . Connect via SSH using an app like PuTTY.
Follow these sequential steps to reactivate the cloud categorization engine and restore your web filtering rules. 1. Verify Your GFI Software License Status inactive rule sets
Sometimes the firewall simply loses sync with the Kerio registration servers, even if your license is valid. Go to . Click the Refresh button at the bottom of the page. Wait for the firewall to contact the Kerio servers. Check if the Web Filter status changes to "Active." 3. Verify DNS and Internet Connectivity
Provide the for verifying your Zvelo token status.
For network administrators relying on Kerio Control (now part of GFI Software), few error messages are as confusing and disruptive as seeing your web filter refuse to work. You navigate to the section of the admin interface, expecting to see traffic being categorized and blocked according to your policies. Instead, you are greeted by a greyed-out dashboard, inactive rule sets, and the dreaded status indicators:
Set up email alerts for Web Filter alerts in the Alerts settings.
If the message persists, the system logs will pinpoint whether the failure is due to an authentication token issue or an unreachable server. Go to the section on the left-hand menu.