Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed

| Symptom | Likely Fix | |---------|-------------| | Web filter not activated | Apply/renew Security Pack license | | Categorization disabled | Trigger manual DB update; fix internet access to update server | | Works for HTTP but not HTTPS | Enable SSL inspection | | Works for some users, not others | Check traffic rule web filter setting | | Never works after fresh install | Reinstall web filter component |

If after all these steps the problem persists, collect Kerio Control support bundle (Status → Support Bundle) and open a ticket with GFI Support – they can check if the internal categorization daemon fails to start due to a deeper system issue.

The categorization database is downloaded from GFI’s update servers. If your firewall blocks its own updates, you’ll see this error.

Test connectivity from the Kerio Control machine itself:

nslookup updates.gfi.com
curl -I https://download.kerio.com/control/categorization/latest.dat

Required outbound access (allow these in your firewall rules): | Symptom | Likely Fix | |---------|-------------| |

If Kerio Control is behind another upstream firewall, create an explicit allow rule from the Kerio Control’s own IP to those destinations.

On Windows-based Kerio Control installations, the web filter module may fail to register with the OS.

Repair installation:

After applying the relevant solutions, verify success: If after all these steps the problem persists,

| Item | Expected Status | |------|----------------| | License → Web Filter | Licensed | | Web Filter → Categorization | Enabled (green) | | Last update | Within 24 hours | | Test a known category | e.g., facebook.com → Shows Social Networking |

If the error persists even after all eight fixes, contact GFI Support and attach the categorization.log file from /var/log/kerio/control/ or categorization folder. Provide them with:

If "Update Now" hangs or fails, the local SQLite database may be locked or damaged.

Via Web Interface (if available):
Some Kerio versions have a hidden reset: If "Update Now" hangs or fails

Via command line (Linux appliance or Kerio Control VM):
Warning: Direct file manipulation can break your installation. Backup first.

/etc/init.d/kerio-control stop
rm -f /var/kerio/kerio-control/categorization.db*
/etc/init.d/kerio-control start

After deletion, Kerio will redownload a fresh copy on the next update cycle (usually within 5 minutes).

On Windows Server (Kerio Control installed as application):