If Kerio is behind another proxy, it might fail to reach home. Go to > Advanced Options > HTTP Proxy .
Kerio uses a third-party engine (zvelo) for web categorization. If the authorization token (which expires every 21 days) fails to refresh, categorization is disabled. Connect via to your Kerio Control appliance. Check the configuration file: /opt/kerio/winroute/winroute.cfg DiaServerUrl v4.url.zvelo.com Change your DNS forwarders to Cloudflare If Kerio is behind another proxy, it might
/etc/init.d/keriocontrol restart