Firewall rules or external DNS servers blocking the authentication requests.
Add a rule for *.zvelo.com to use Cloudflare ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ).
Some Kerio versions have a hidden reset: Firewall rules or external DNS servers blocking the
After performing the fixes, navigate back to . The "Categorization is disabled" warning should be gone. The status should show "Active."
and runs a command to reset the timers and disable the sensitive reliability check: cd /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" /etc/boxinit.d/60winroute restart Manual Re-activation : Once the backend is stable, they return to the Applications and Web Categories tab and re-check Enable Kerio Control Web Filter The "Categorization is disabled" warning should be gone
If Kerio Control detects multiple DNS timeouts (10 failures within 1 minute), it may automatically disable the Web Filter as "unreliable". You can manually disable this safety check via SSH: Log in to the console. Navigate to /opt/kerio/winroute ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the service using /etc/boxinit.d/60winroute restart 3. Verify License and Module Activation
: Avoid using Google DNS (8.8.8.8) as your primary forwarder for this service. Instead, set Cloudflare (1.1.1.1) or OpenDNS (208.67.222.222) as custom DNS servers for the *.zvelo.com domain. Navigate to /opt/kerio/winroute
Ensure your license includes the Web Filter module, as it reverts to a trial and disables automatically after 30 days without a valid key. Use the Configuration Assistant Update license info to refresh your status. support.keriocontrol.gfi.com Checklist for Persistent Issues Check Time & Connectivity: