Kerio — Control Web Filter Is Not Activated Categorization Is Disabled Hot

If the token fails to transfer from Kerio's internal servers, you may need to access the Kerio Control console via SSH .

Troubleshooting Kerio Control: "Web Filter is Not Activated, Categorization is Disabled" Error

Kerio Control 依赖 DNS 查询来获取 Zvelo 服务的授权令牌 (token)，此令牌有效期为 21 天。使用某些公共 DNS 服务器（如 Google 的 8.8.8.8）有时会导致这种令牌交换出现问题。

Set the field to use stable, unmanipulated public resolvers such as Cloudflare ( 1.1.1.1 ) or OpenDNS ( 208.67.222.222 ). Avoid using Google DNS ( 8.8.8.8 ) for this specific lookup rule, as it can cause authentication token drops.

Troubleshooting "Kerio Control Web Filter is Not Activated / Categorization is Disabled" If the token fails to transfer from Kerio's

如果您的 Kerio Control 防火墙突然在 页面显示 "Kerio Control Web Filter is not activated, Categorization disabled" (Kerio Control 网页过滤器未激活，分类已禁用) 的提示，或者所有用户突然可以不受限制地访问网络，导致您的网络管理形同虚设，请不要慌张。这是一个在 Kerio Control 环境中比较常见的问题，尤其是当设备处于高负载状态或配置环境发生变化时。

The Web Filter requires an active, paid subscription. If your Kerio Control Software Maintenance (Sub) expires, the categorization engine shuts down.

Navigate to > Applications and Web Categories and check Enable Kerio Control Web Filter .

：

Use a reliable pool like pool.ntp.org or your local region's NTP server.

Go to your dashboard and verify that your shows a valid, unexpired status.

: Use an SSH client like PuTTY or a native terminal to log in as root with your standard administrator password.

Keep standard configuration backups so you can restore settings quickly if a system rollback is required. Troubleshooting "Kerio Control Web Filter is Not Activated

If you would like assistance with any of these steps, please let me know your current or share any recent entries from your Error and Security logs .

When this issue occurs, your Content Filter rules fail, users face unexpected network disconnections, and your organization is left exposed to malicious web content. Because Kerio Control relies on external partners like Zvelo to continuously tag websites, any disruption in licensing, DNS resolution, or service reliability triggers an automatic protective shutdown of the filtering module.

: Ensure the DiaServerUrl in /opt/kerio/winroute/winroute.cfg is set correctly to v4.url.zvelo.com .