Kerio Control Web Filter Is Not Activated Categorization Is Disabled Hot [hot]

Web Filter categorization disabled. Serial number: ko-197974

如果您的 Kerio Control 防火墙突然在 页面显示 "Kerio Control Web Filter is not activated, Categorization disabled" (Kerio Control 网页过滤器未激活，分类已禁用) 的提示，或者所有用户突然可以不受限制地访问网络，导致您的网络管理形同虚设，请不要慌张。这是一个在 Kerio Control 环境中比较常见的问题，尤其是当设备处于高负载状态或配置环境发生变化时。

// 获取并刷新 URL 分类数据库的最新状态 api.post("settings/control/webFilter/getCategories"); Web Filter categorization disabled

To help find the quickest fix, could you check your and tell me if you see a DNS response timeout or an Invalid authorization code? Knowing your current Kerio Control version would also be very helpful. Share public link

To force the Web Filter back into an active state and prevent it from disabling itself due to "unreliability," you can disable the reliability check using the GFI Support recommended commands: Log in to the Kerio Control console via SSH (e.g., using Navigate to the configuration directory: cd /opt/kerio/winroute Disable the reliability detection and reset the status: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the Kerio Control engine: /etc/boxinit.d/60winroute restart support.keriocontrol.gfi.com Permanent Fixes & Troubleshooting Share public link To force the Web Filter

If you recently renewed, click in the Configuration > Dashboard > License section to force the server to fetch the updated expiration date. 2. Check and Fix DNS Settings

This procedure requires command-line access and will restart Kerio Control , causing a brief network interruption. Perform this during a maintenance window. Perform this during a maintenance window

Modify the primary database setting by executing the internal query tool: ./tinydbclient "update SiteFilter set DetectReliability=0" Use code with caution. Commit and reinitialize system parameters by running: /etc/boxinit Use code with caution. 3. Verify System License Expiration Status

Click the button and accept the security warning.

Sometimes the local database simply needs to be "kicked" to re-establish a connection with the cloud.

: An incorrectly set system date and time on the Kerio Control server can break HTTPS/TLS certificate validation, preventing the license validation and communication with cloud-based filtering services. A failed DNS lookup for the DiaServerUrl (e.g., v4.url.zvelo.com ) can also cause the authorization token (which expires every 21 days) to fail.