Kerio Control Web Filter Is Not Activated Categorization Is Disabled Work May 2026

Go to or Web Filter → Upstream Proxy (version dependent).

This article explains why this message appears, the seven most common causes, and step-by-step solutions to restore full web filtering functionality. To understand the error, you must first know how Kerio Control’s web filter works.

Indirectly. HTTPS filtering (SSL inspection) is separate. However, if categorization is disabled, you cannot block HTTPS sites based on category, even if SSL inspection is on. Go to or Web Filter → Upstream Proxy (version dependent)

Kerio Control does not rely solely on static blocklists. Instead, it uses . When a user requests a website, the Kerio appliance queries a remote categorization server (provided by Kerio’s parent company, GFI Software, or a third-party partner like McAfee). The server returns a category ID (e.g., 92 for “Gambling”). The appliance then applies your content rules.

No. The free version (limited to 5 users) does not include cloud categorization. Web filtering will always show as disabled. Conclusion The message “Kerio Control web filter is not activated – categorization is disabled” is not a minor glitch—it signals that category-based content filtering is completely offline. Most often, the culprit is an expired license, DNS failure, or an outbound firewall rule blocking the appliance’s own traffic. Indirectly

Usually 1–5 minutes. Restart the firewall engine for immediate effect.

Yes. Use Kerio’s test tool (if installed): /usr/local/kerio/winroute/bin/kwfmgr --test-categorization example.com Kerio Control does not rely solely on static blocklists

Article ID: KC-WF-001 Product: Kerio Control (formerly WinRoute) Affected Versions: 9.x, 8.x, and legacy 7.x Symptoms: Web filtering fails, content rules are ignored, and the administration interface shows a warning that categorization is disabled. Introduction Kerio Control is a robust unified threat management (UTM) appliance that provides firewall, VPN, and web content filtering. One of its most valuable features is the ability to block or allow websites based on dynamic URL categorization (e.g., “Social Networking,” “Adult Content,” “Streaming Media”).