: Ensure the "Kerio Control Web Filter categories and applications" rule is enabled under Content Filter > Content Rules .
Without this communication, the firewall cannot determine if a site belongs to "Social Media," "Malicious," or "Job Search" categories. As a result: Blocked categories become accessible.
typically due to a loss of reliability in the DNS checks to Kerio's update servers or an authorization token expiration support.keriocontrol.gfi.com Immediate Fixes Disable Reliability Detection (SSH Method):
If a traffic rule prevents the appliance from reaching the update servers, it cannot validate the Web Filter license. : Ensure the "Kerio Control Web Filter categories
This report outlines the causes and solutions for the error where . This issue typically stems from connectivity failures, authorization timeouts, or expired security tokens used by the Zvelo categorization engine. 1. Root Causes
If the firewall cannot reach the cloud servers, categorization will fail. Go to > DNS .
grep "categorization" /var/log/kerio/access.log | tail -5 typically due to a loss of reliability in
For further assistance with specific error codes, you can visit the GFI Support Portal Using Kerio Control Web Filter
Ensure that traffic from the to the Internet is allowed for common browsing ports ( Advanced Troubleshooting: When "Fixed" Isn't Fixed
The firewall cannot resolve the hostnames of the external categorization servers. : Ensure the "Kerio Control Web Filter categories
: Temporary packet drops or slow internet lines trigger the firewall's reliability safety threshold.
Method 1: Disable Reliability Detection via SSH (Permanent Fix)