What of Kerio Control are you running?

: After updating DNS settings, a reboot is often necessary to refresh the token transfer from Kerio internal servers. 4. Verify License Status

Ensure the "Web Filter" module is listed as active. If it shows as "Expired" or "Not Licensed," you must renew your subscription to reactivate categorization.

To avoid this issue in the future, consider the following best practices:

在深入到具体的解决方案之前，我们需要理解这一信息背后的含义。Kerio Control 是 GFI 公司推出的一款集路由、防火墙和 VPN 于一体的网络安全设备，主要用于中小型企业的互联网接入管理。在 2022 年 10 月，GFI 公司收购了 Kerio Control 的相关业务。

If a new version is available, back up your current configuration and upgrade immediately.

: Within the web filter settings, locate the categorization settings. Kerio Control uses a database of categorized websites to filter content. If categorization is disabled, find the option to enable it. This might involve selecting categories you wish to block or allow.

: This often stems from an expired Zvelo token (which typically expires after 21 days). If the appliance cannot fetch a new token from Kerio’s internal servers, the filter remains inactive.

Check the box for and click Edit . Add a new rule with the following parameters: DNS Name: *.zvelo.com

When you see "categorization is disabled hot ," the engine is screaming for attention. It has fresh cached data but cannot authenticate or download differential updates. In this state, all categories show as "Uncategorized," meaning your rules (e.g., "Block Adult Content") will not match anything.

URL categorization uses SSL certificates and timestamps. If your Kerio server’s clock is off by more than 5 minutes (common on virtual machines with paused snapshots), the handshake fails. The system reports "disabled" because it cannot validate the security token.

for a specific version of Kerio Control, or do you need help verifying your license status

If you want to force the web filter to stay active despite poor network reliability, you can disable the reliability detection in the SSH console.