Perform these quick checks to save time:
The categorization database is downloaded from GFI’s update servers. If your firewall blocks its own updates, you’ll see this error. Perform these quick checks to save time:
Test connectivity from the Kerio Control machine itself: Required outbound access (allow these in your firewall
nslookup updates.gfi.com
curl -I https://download.kerio.com/control/categorization/latest.dat
Required outbound access (allow these in your firewall rules): Even if your license appears active
If Kerio Control is behind another upstream firewall, create an explicit allow rule from the Kerio Control’s own IP to those destinations.
Even if your license appears active, re-entering it can re-trigger the activation of the web filter module.
After restart, wait 2–3 minutes and refresh the Web Filter page.