You need a valid maintenance contract to upgrade.
The message indicates Kerio Control’s web filtering isn’t functioning because URL categorization is disabled or unreachable, which disables policy-based filtering and reporting. Investigate licensing, connectivity to categorization services, configuration, system time/certificates, software version, and resource usage; then re-enable the feature, restore connectivity, renew licenses, rebuild caches, update software, and verify operation. If unresolved, collect logs and contact vendor support.
: Users report that when the filter is "disabled," the entire security policy for web access may fail open or closed depending on configuration, leading to either security gaps or frustrated users unable to access legit sites.
If it says Expired or Not Licensed , you must purchase a renewal or apply a valid license key. You need a valid maintenance contract to upgrade
Enable SSH access in .
If you would like assistance with any of these steps, please let me know your current or share any recent entries from your Error and Security logs .
Start with and Step 5 (DNS) – these resolve the majority of "hot" support tickets. For persistent issues, enable debug logs and contact GFI support with the output. If unresolved, collect logs and contact vendor support
If you just renewed, click to refresh the license key. Verify Connection to Kerio Servers
Kerio Control’s web content filtering is failing: the Web Filter service shows “not activated” and URL categorization is disabled, causing unfiltered web access. This is a high-priority (hot) problem because it bypasses policy enforcement and exposes users to inappropriate or malicious content.
Sometimes a simple reboot after changing DNS settings is required to force a new token request. 3. Advanced SSH Fix (Disable Reliability Detection) Enable SSH access in
This error indicates that Kerio Control cannot verify its license or reach the categorization servers, typically due to DNS timeouts license expiration support.keriocontrol.gfi.com Quick Fixes Check DNS Forwarders : Use reliable DNS servers like Cloudflare (1.1.1.1) or
/etc/init.d/kerio-filtering start
If the web filter remains disabled after an hour and DNS settings are correct, you can manually reset the reliability detection via SSH: to your Kerio Control console.
Check your DNS settings; if the firewall can't resolve ://kerio.com , the filter will fail. Sync the System Time
Once you have completed these steps, you must check if the database is communicating correctly: