To prevent similar issues in the future, we recommend:
Since Web Filter relies on categorizing URLs by domain, proper DNS resolution is paramount.
While categorization is broken, you can still filter by: To prevent similar issues in the future, we
Here’s a useful, troubleshooting-focused article based on the error message:
: Kerio Control sends periodic DNS check queries to update servers. If these fail 10 times in a row, the web filter is disabled for reliability reasons. The error indicates that your firewall cannot classify
The error indicates that your firewall cannot classify web pages, which often leads to intermittent internet dropouts or unblocked malicious content . This critical issue typically stems from unreliable DNS queries sent to Kerio update servers, expired Zvelo URL database tokens , or subscription synchronization errors.
| Action | Purpose | |--------|---------| | Monitor license expiry (30-day reminder) | Avoid unexpected expiration | | Whitelist Kerio’s update domains in outbound rules | Ensure categorization works | | Enable NTP and system health alerts | Prevent time sync failures | | Schedule automatic database updates | Keep categories current | | Backup configuration monthly | Quick restore after corruption | Without categorization, the firewall cannot block or allow
When you see or “Categorization is disabled” in Kerio Control (now GFI Kerio Control), it means the URL filtering feature cannot check websites against its cloud-based category database. Without categorization, the firewall cannot block or allow sites based on content type (e.g., social media, adult content, streaming).
为了更好地防患于未然,建议您将以下融入到日常管理中: