: The Kerio Control Web Filter is an optional module. If not licensed, it functions as a 30-day trial and automatically disables itself afterward.
If the system text or logs say or "Web Filter is not activated," the firewall cannot identify what type of traffic is passing through. Consequently, it cannot enforce rules based on those categories (e.g., "Block Gambling"), causing the filter to effectively stop working or allow all traffic.
This issue is typically caused by , expired authentication tokens , or network reliability checks failing multiple times in a row. Use the following guide to troubleshoot and implement workarounds. 1. Immediate Workaround: Disable Reliability Detection : The Kerio Control Web Filter is an optional module
Go to > Advanced Options > Time Synchronization . Check Synchronize time with NTP server . Use a reliable pool like pool.ntp.org . Click Apply and click Synchronize Now to force an update. Step 4: Clear Web Filter Cache and Force Re-activation
Kerio Control relies on secure HTTPS connections to check license validity. If your firewall’s clock is incorrect, the security certificates will be rejected. Go to . Select the System Time tab. Ensure that Keep synchronized with NTP server is checked. Consequently, it cannot enforce rules based on those
Ensure is open outbound for database definition downloads. Ensure Port 53 (UDP/TCP) is fully open for DNS queries. Step 6: Verify the Safe/Allowed List
This effectively neuters your firewall’s ability to block social media, malware domains, or adult content. Without categorization, your URL rules become useless. This article provides a deep-dive into why this happens and a step-by-step guide to reactivating the filter. or adult content. Without categorization
If the license and connection are valid, ensure the setting is actually checked in the UI: Kerio Control Administration interface Navigate to Content Filter Applications and Web Categories Enable Kerio Control Web Filter GFI Support SSH commands to check your current license status or verify Zvelo server connectivity Using Kerio Control Web Filter - KerioControl - GFI
Use reliable public NTP servers like pool.ntp.org or ://google.com .
Are you seeing any specific (like "Invalid Authorization" or "DNS response timeout") in the Error or Debug logs? Using Kerio Control Web Filter - KerioControl - GFI