If you are encountering the error "Kerio Control Web Filter is not activated; categorization is disabled," your firewall has likely triggered a safety mechanism that pauses web filtering when it cannot reliably reach the categorization servers.
Kerio Control does not simply block URLs via a static list. It uses a dynamic cloud categorization service. When a user requests facebook.com, Kerio Control sends a hash of that domain to GFI’s cloud servers. The servers reply with a category (e.g., "Social Networking"). Your firewall then applies the rule (e.g., "Block Social Networking"). If you are encountering the error "Kerio Control
Are you seeing a specific "Invalid Authorization" error in the logs, or is the checkbox just grayed out? Using Kerio Control Web Filter Check:
Note: A trial license includes web filtering, but it expires. Many admins forget to update after a trial. Go to Content Filter > Web Filter >
Introduction: The Frustration of a Broken Filter
Execute the following command to disable reliability checks:./tinydbclient "update SiteFilter set DetectReliability=0". Restart the service: /etc/boxinit.d/60winroute restart.