Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed Jun 2026

If you have recently upgraded your Kerio Control software version, ensure your Software Maintenance Agreement (SMA) was active at the time of the software release. Running a newer version of Kerio Control on an expired SMA will permanently disable add-on features like the Web Filter. Conclusion

typically due to a loss of reliability in the DNS checks to Kerio's update servers or an authorization token expiration support.keriocontrol.gfi.com Immediate Fixes Disable Reliability Detection (SSH Method):

The Kerio Control appliance must be able to resolve the addresses of the backend categorization servers. If the firewall itself cannot resolve DNS, the Web Filter will fail to activate. If you have recently upgraded your Kerio Control

Click Update License Info to force the appliance to check in with the GFI servers. 2. Check DNS Resolution on the Firewall

If the issue persists, ensure your Kerio Control firmware is up to date, as older versions may struggle to communicate with updated classification servers. If you'd like, I can: If the firewall itself cannot resolve DNS, the

In Kerio Control (formerly WinRoute), the web filter relies on:

Even with a license, the service may be stopped or hung. Check DNS Resolution on the Firewall If the

Execute the following terminal commands to alter the internal database and reset the system timers:

Do you see any specific errors in the or Warning Log modules?

Large time drifts can cause certificate and token failures. Ensure the system time is synchronized. Verify Admin Settings: Navigate to Content Filter Applications and Web Categories

cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/winroute restart Use code with caution.