Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot ((exclusive)) Direct

Keep standard configuration backups so you can restore settings quickly if a system rollback is required.

In environments with unstable WAN links, the web filter might frequently toggle to a "disabled" status even when the internet is generally usable.

to disable the reliability check and restart the service: Keep standard configuration backups so you can restore

: If the filter shows "Invalid Authorization," your Zvelo token may have expired. This typically happens if the firewall cannot reach internal Kerio servers to refresh the 21-day token. GFI Support if the SSH command fails?

If the filter remains disabled after a restart or after an hour, you may need to manually reset the "Reliability Detection" via the SSH console: support.keriocontrol.gfi.com Enable SSH and navigate to Status > System Health , then click Enable SSH Access the Console This typically happens if the firewall cannot reach

Upstream ISPs often drop or throttle heavy volumes of short-lived TXT/DNS requests generated by real-time classification engines. Route zvelo-specific tracking requests away from local ISP infrastructure to high-availability alternative public resolvers. Log into your interface. Navigate to Configuration > DNS .

: If "Invalid Authorization" appears in logs, it may be due to an expired Zvelo key token (usually valid for 21 days), often caused by specific DNS forwarding issues. support.keriocontrol.gfi.com SSH commands Route zvelo-specific tracking requests away from local ISP

If the error persists despite valid licensing and perfect connectivity, the update files on the appliance might be corrupted. You can force a clean redownload via SSH.

If the web interface toggle does not work, you can manually delete the corrupted database files using an SSH terminal.

From the Kerio Control host (use diagnostics → command line or SSH):