If the license is active but showing an error, click to force a sync with the GFI/Kerio activation servers.
Sometimes, a service restart is needed to clear stuck licensing checks.
For registration and database updates. UDP/TCP Port 53: For DNS resolution.
Test the resolution: Go to , open the Tasks or Ping utility (if available in your version), or SSH into the box and verify you can ping external domains. 3. Check Traffic Rules for Outbound Communication If the license is active but showing an
The most common cause is an expired, unassigned, or trial-expired license for the Web Filter service.
What specific of Kerio Control are you running? Are you seeing any specific error codes in the Warning or Error logs? If you want to check your system logs via the terminal, I can provide the exact SSH commands to diagnose the cloud connection.
How to Fix "Kerio Control Web Filter is Not Activated, Categorization is Disabled" UDP/TCP Port 53: For DNS resolution
The firewall must reach Kerio’s servers to activate the filter. Ping ://kerio.com from the Kerio console. Ensure DNS servers are correctly configured. Check if an upstream firewall is blocking port . 2. Verify License Status Categorization requires an active Web Filter subscription . Go to Dashboard > License Details . Check the expiration date for Kerio Control Web Filter.
In the world of network management, few things are as frustrating as seeing a "Not Activated" status on a tool you rely on. Here is the story of how the Kerio Control Web Filter's categorization issue—a common headache for admins—is typically diagnosed and fixed. The Situation Everything seems fine until the administrator logs into the Kerio Control Webadmin and sees a warning:
instead of Google's DNS to ensure correct token transfer from internal servers. Renew/Update License: Check Traffic Rules for Outbound Communication The most
Use an SSH client (like PuTTY) to log into your Kerio Control appliance using root credentials. Stop the Kerio Control engine by running: /etc/boxinit.d/60winroute stop Use code with caution.
Using Google’s DNS (8.8.8.8) can sometimes cause renewal issues. It is recommended to use Cloudflare (1.1.1.1) (208.67.222.222) as custom DNS servers for *.zvelo.com Verify Config File: Use an SSH console to access /opt/kerio/winroute/winroute.cfg and ensure the DiaServerUrl value is set to v4.url.zvelo.com 2. Resolve "Reliability Detection" Issues