Kerio Control must communicate with external cloud servers to categorize websites and verify your subscription status. If your firewall cannot reach these servers, it disables categorization. Allow Outbound Ports
If the web interface toggle does not work, you can manually delete the corrupted database files using an SSH terminal.
Do not restart the entire firewall yet. Follow this logical sequence: Kerio Control must communicate with external cloud servers
: Log in to the Kerio Control administration interface. This usually involves navigating to http://<your-kerio-ip>:4081/admin (though the exact URL might vary based on your setup).
Since Web Filter relies on categorizing URLs by domain, proper DNS resolution is paramount. Do not restart the entire firewall yet
: An incorrectly set system date and time on the Kerio Control server can break HTTPS/TLS certificate validation, preventing the license validation and communication with cloud-based filtering services. A failed DNS lookup for the DiaServerUrl (e.g., v4.url.zvelo.com ) can also cause the authorization token (which expires every 21 days) to fail.
The Kerio Control Web Filter license or its categorization engine is not functioning. As a result, the system cannot classify websites into categories (e.g., Social Media, Streaming, Malware, Adult Content). Any firewall rule that depends on or Category-based filtering will be ignored or will fail to match traffic correctly. Since Web Filter relies on categorizing URLs by
. When this error strikes, users may experience sporadic internet outages, and network administrators are left without crucial web security controls.
rating servers or detects a reliability issue with the DNS response support.keriocontrol.gfi.com Immediate Fixes Restart the Engine