Kerio Control uses DNS queries to reach its update and categorization servers. If your ISP or current DNS configuration is slow or blocking these requests, the filter will deactivate.
Ensure your Kerio Control Web Filter license is active. Without a valid subscription, the module defaults to a trial state and eventually disables itself.
If your error log specifically mentions "Invalid Authorization," it likely means the has expired (tokens typically last 21 days). Kerio Control uses DNS queries to reach its
Avoid using Google DNS (8.8.8.8) for Zvelo categorization as it can cause "Invalid Authorization" errors. Instead, use Cloudflare (1.1.1.1) or OpenDNS (208.67.222.222).
Sometimes a simple reboot after changing DNS settings is required to force a new token request. 3. Advanced SSH Fix (Disable Reliability Detection) Without a valid subscription, the module defaults to
The error typically occurs when the firewall cannot reach the Zvelo categorization servers or when the license token has expired. This is often triggered by DNS failures, where the system marks the filter as "unreliable" after multiple failed connection attempts. Core Troubleshooting Steps 1. Verify DNS and Reachability
Do you need the specific to check your current license status or verify the winroute.cfg contents? Instead, use Cloudflare (1
Note that the Web Filter is disabled by default for the Guest Interface to allow users to reach the welcome page without authentication.
Ensure the value v4.url.zvelo.com is correctly set in the configuration file located at /opt/kerio/winroute/winroute.cfg .