If the error is caused by "Invalid Authorization," it is usually due to an expired or blocked security token: support.keriocontrol.gfi.com Configure DNS Forwarding : Ensure your firewall can resolve *.zvelo.com GFI Support recommends using stable DNS servers like Cloudflare (1.1.1.1) OpenDNS (208.67.222.222) specifically for these requests to avoid timeouts. Check the Configuration File : Verify that DiaServerUrl v4.url.zvelo.com /opt/kerio/winroute/winroute.cfg
Is the issue occurring continuously, or is it ?
Once the underlying network communication pathways are restored, verify your active filtering configuration.
Navigate back to the WebAdmin console, access > License , and click Refresh to re-verify your commercial entitlements. Summary Troubleshooting Checklist Problem Area Diagnostics Indicator Immediate Remedy DNS Resolvers DNS response timeout logs Map *.zvelo.com to Cloudflare/OpenDNS resolvers. ISP Latency Module flips off every few hours Disable DetectReliability via internal SSH database edit. License Check WebFilter reverts to trial/inactive If the error is caused by "Invalid Authorization,"
At its heart, Kerio Control's Web Filter relies on a third-party service, currently provided by , to maintain a dynamic, real-time database of website categorizations. When a user requests a webpage, the firewall sends a query to this service. The service responds with the page's category (e.g., "Social Networking," "Streaming Media," "Productivity"). Based on this rating and your predefined content rules, Kerio Control either allows or denies the connection.
We recommend using reliable public resolvers like Google DNS ( 8.8.8.8 and 8.8.4.4 ) or Cloudflare ( 1.1.1.1 ).
The firewall cannot resolve update.kwf.kerio.com or the category servers. Navigate back to the WebAdmin console, access >
Ensure the "Web Filter" module is listed as active. If it shows as "Expired" or "Not Licensed," you must renew your subscription to reactivate categorization.
If storage utilization matches or exceeds 95%, clear out bloated database cache files: rm -rf /var/winroute/lib/firebase/* Use code with caution.
Remove the corrupted database or update files (Note: exact paths may vary slightly by version; ensure you back up files if unsure): rm -rf * Use code with caution. Restart the Kerio Control service: /etc/boxinit.d/60kcontrol start Use code with caution. License Check WebFilter reverts to trial/inactive At its
To resolve this issue, we recommend:
Execute the following command to disable the reliability check: ./tinydbclient "update SiteFilter set DetectReliability=0" . Restart the service: /etc/boxinit.d/60winroute restart .