Kerio Control is a robust unified threat management (UTM) firewall designed for small and medium-sized businesses. A core component of its security arsenal is the , powered by zvelo, which categorizes websites to allow, block, or monitor user traffic.
After implementing the fixes, verify that the Web Filter is correctly categorizing websites.
If the Web Filter module is in trial mode and the 30-day period has passed, the service will be automatically disabled 1.2.5. Step-by-Step Fixes: Restoring Web Filter Functionality Kerio Control is a robust unified threat management
Then came the other problem. Since categorization was disabled, the "safe search" enforcement was also off. A seventh-grader innocently searching for "swim team" was shown results that would make a sailor blush. The filter wasn't blocking bad things; it also wasn't blocking inappropriate things that looked like innocent things.
The "Kerio Control Web Filter is not activated. Categorization is disabled" error is serious but entirely solvable. By systematically verifying your license, enabling the module, checking DNS connectivity, and, if necessary, resetting the reliability detection via SSH, you can restore full filtering functionality to your network. If the Web Filter module is in trial
Are you seeing any specific (like "Invalid Authorization" or "DNS response timeout") in the Error or Debug logs? Using Kerio Control Web Filter - KerioControl - GFI
Fixing this problem requires a mix of . 🛠️ Summary of Quick Fix Workarounds Primary Solution DNS Timeout (Check Failures) Disable Reliability Detection via SSH Expired Zvelo Token Route Zvelo domains through Cloudflare/OpenDNS Expired License Renew GFI Kerio Control Web Filter subscription Emergency Network Freeze Create temporary wildcard Content Rules 🛑 Root Causes Behind the Error 1. The 10-Query DNS Timeout Rule A seventh-grader innocently searching for "swim team" was
Once the web filter is active again, implement these best practices:
If the system time on your Kerio Control appliance differs significantly from real-world time, SSL certificates will fail to validate, blocking the activation connection.
If you are still experiencing issues, the Security Log provides the exact reason for the failure. Go to > Security . Look for errors mentioning "zvelo" or "web filter."
In a modern business network, managing employee internet usage and ensuring security against malicious websites is critical. provides a powerful web filtering tool that categorizes websites to allow, block, or monitor user activity. However, many administrators encounter the frustrating scenario where the Kerio Control Web Filter is not activated , leading to a "categorization is disabled" status, which essentially halts web filtering functionality .