If your internet link is slow or unstable, Kerio may proactively disable the filter. You can force it to stay active via the : SSH into your Kerio appliance.
The "not activated" status is usually a protective state triggered by one of the following:
If the UI is unresponsive or the filter refuses to activate despite a valid license, a service restart via SSH or the local console often resolves the "stuck" state.
The core Kerio Control software license may be active, but the add-on Web Filter license has expired or failed to sync. If your internet link is slow or unstable,
Verify time and certificates
Toggle the Web Filter "Enable" checkbox to reset the connection.
If you manage a Kerio Control firewall (now part of GFI Software), you may have encountered a frustrating error on the status page: The core Kerio Control software license may be
If you are running , GFI has deprecated the old categorization protocol. Versions 9.3+ use a newer, more stable API.
Inspect outbound connectivity and firewall rules
The Kerio Control Web Filter requires its own module license. Trial Expiry: Versions 9
| FQDN | Port | Purpose | |------|------|---------| | licensing.gfi.com | 443 | License validation | | brightcloud.kerio.com | 443 | URL categorization updates | | ocsp.digicert.com | 80/443 | Certificate revocation (HTTPS inspection) |
Then re-download categories.
To fix the issue of the Kerio Control web filter not being activated, and categorization is disabled, follow these steps: