: The Zvelo key token may have expired (typically every 21 days) or is blocked by your ISP's DNS. Slow Connectivity
If the web filter is disabled due to a "temporary" DNS issue, you may need to force it back on via SSH. Login to Kerio Control via SSH.
If the system time on your Kerio Control appliance differs significantly from real-world time, SSL certificates will fail to validate, blocking the activation connection. : The Zvelo key token may have expired
One or more IP addresses. Failure response: “Server failed” or “NXDOMAIN.”
If the Web Filter shows as "not activated" even with a valid license, Kerio may have disabled it due to detected unreliability (e.g., more than 10 failed DNS check queries in one minute). To force-enable the service and bypass reliability checks: If the system time on your Kerio Control
The firewall must be able to reach external Kerio servers to verify your license and download the URL categorization database.
The "Web Filter is not activated, categorization is disabled" error in Kerio Control is a serious issue that is almost always fixable through systematic troubleshooting. The problem can range from a simple licensing oversight to a more complex network configuration or hardware fault. By systematically checking the license, DNS, system time, and logs, you can identify the root cause and apply the appropriate solution, such as adjusting the reliability detection via SSH. To force-enable the service and bypass reliability checks:
That night, Leo didn't turn the filter back on. Instead, he wrote a 17-line script. It didn't enable categorization. It did something smarter. He set Kerio to a "Log-Only" mode with a custom rule: If categorization is disabled, then throttle all un-categorized traffic to 1kbps and route it to a local cache that updates every 10 seconds.
Look specifically for the expiration date.
KC-WF-001 Product: Kerio Control (formerly WinRoute) Affected Versions: 9.x, 8.x, and legacy 7.x Symptoms: Web filtering fails, content rules are ignored, and the administration interface shows a warning that categorization is disabled.
In older versions of Kerio Control (v8.x and v9.x), there is a manual override that administrators accidentally click.