Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work «Cross-Platform»

Without a valid license, the web filter will not activate. Navigate to Status → License Information.

Note: A trial license includes web filtering, but it expires. Many admins forget to update after a trial.

The web filter uses SSL certificates to talk to GFI’s cloud. If your Kerio server’s clock is off by more than 5 minutes, the SSL handshake fails, and categorization is disabled. Without a valid license, the web filter will not activate

Fix:

This status typically arises from one of the following: Note: A trial license includes web filtering, but

The message “Kerio Control web filter is not activated – categorization is disabled” is not a minor glitch—it signals that category-based content filtering is completely offline. Most often, the culprit is an expired license, DNS failure, or an outbound firewall rule blocking the appliance’s own traffic.

By systematically working through the eight steps outlined above—license validation, enabling the engine, checking DNS and NTP, configuring an upstream proxy, and clearing corrupted caches—you can restore full web filtering in minutes. The web filter uses SSL certificates to talk

Remember: Cloud categorization requires the firewall itself to act as a client. Treat it like any other workstation that needs DNS, NTP, and outbound HTTPS access. With proper monitoring and preventative maintenance, you can ensure that “categorization disabled” becomes a rare event rather than a recurring headache.

Need further assistance?
Visit the official Kerio Control Knowledge Base or the GFI Community Forums. Always include your debug logs (Diagnostics → Generate Support Info) when seeking vendor support.

Last updated: 2025
Revision: 4.0

Sometimes the background service responsible for categorization simply hangs.