Kerio Control Web Filter Is Not Activated Categorization Is Disabled Fixed May 2026
Here’s a detailed troubleshooting and resolution guide for the issue where Kerio Control’s web filter is not activated and categorization is disabled.
Step 5 – SSL Inspection (HTTPS Categorization)
For HTTPS sites, Kerio Control must intercept and inspect SSL to categorize URLs. Without SSL inspection, only SNI-based partial categorization works. Here’s a detailed troubleshooting and resolution guide for
Step 1 – Verify Licensing
Kerio Control’s web filter requires a Content Filtering license (part of the Security Pack). Step 5 – SSL Inspection (HTTPS Categorization) For
Fix 5: Repair Time Synchronization (NTP)
Categories rely on HTTPS certificates and time-based tokens. If your system clock is off by more than a few minutes, the categorization service will disable itself to avoid security mismatches. If incorrect:
Check system time via SSH:
date
If incorrect:
- Go to Configuration → Advanced → Time Settings
- Enable Use NTP server (e.g.,
pool.ntp.org) - Apply and force a sync:
ntpdate -u pool.ntp.org - Restart categorization service again.