If the error persists despite a stable internet connection, Kerio Control's "Reliability Detection" may have permanently disabled the filter after 10 failed connection attempts support.keriocontrol.gfi.com . You can reset this via support.keriocontrol.gfi.com Log in to Kerio Control via SSH (e.g., using support.keriocontrol.gfi.com Navigate to the directory cd /opt/kerio/winroute Disable Reliability detection and reset the timers: ./tinydbclient "update SiteFilter set DetectReliability=0" Restart the engine /etc/boxinit support.keriocontrol.gfi.com Configuration Check In the administration interface, go to Content Filter Applications and Web Categories support.keriocontrol.gfi.com Enable Kerio Control Web Filter is checked GFI Support If a specific site is still blocked erroneously, use the
Open your terminal emulator (e.g., PuTTY) and log into the firewall's root environment using your administrative credentials. Navigate to the installation directory: cd /opt/kerio/winroute Use code with caution.
At its heart, Kerio Control's Web Filter relies on a third-party service, currently provided by , to maintain a dynamic, real-time database of website categorizations. When a user requests a webpage, the firewall sends a query to this service. The service responds with the page's category (e.g., "Social Networking," "Streaming Media," "Productivity"). Based on this rating and your predefined content rules, Kerio Control either allows or denies the connection. If the error persists despite a stable internet
Go to → Services .
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. At its heart, Kerio Control's Web Filter relies
Under the or custom rule tables, map queries destined for *.zvelo.com exclusively to reliable, ultra-low-latency public servers like Cloudflare or OpenDNS: Cloudflare : 1.1.1.1 OpenDNS : 208.67.222.222 and 208.67.220.220 Click Apply .
The firewall uses security tokens to communicate with *.zvelo.com . These tokens expire every 21 days. If a renewal request fails due to bad routing or upstream blocking, you will see an "Invalid Authorization" alert in your error logs. Based on this rating and your predefined content
Google's public DNS servers sometimes experience issues fetching Zvelo authentication tokens. Switching your DNS forwarding rules to Cloudflare or OpenDNS resolves this communication bottleneck. Log into your . Navigate to Configuration > DNS .
Older versions (pre-9.3.5 or 10.x early builds) had known issues with GFI’s cloud categorization endpoints migrating to new TLS ciphers.
This is the most critical and likely cause.