GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Web Filter categorization disabled
Web Filter categorization disabled [message #114605] Wed, 02 July 2014 22:38 Go to next message
RMCholewa is currently offline  RMCholewa
Messages: 9
Registered: July 2014
Hi there,

I have a strange problem. My Kerio Web Filter disabled itself from time to time (at least a dozen times a day), although properly licensed.

After checking the error log, I have found this:

[02/Jul/2014 16:40:08] DNS response timeout, Kerio Control Web Filter categorization disabled. Serial number: XXXXXX

If I go to the Kerio Control Web Filter tab, disable it and enable it again immediately, it starts working again.

Problem is, I have to do it all the time, dozens of times a day to keep my log and categorization running. No, I do not have any DNS problems whatsoever.

Are there any ways of increasing this "timeout"?

Thank you in advance.
Re: Web Filter categorization disabled [message #114613 is a reply to message #114605] Thu, 03 July 2014 02:03 Go to previous messageGo to next message
mlee (Kerio)
Messages: 211
Registered: October 2012
Location: Sydney
Since it's a DNS timeout, have you tried using another DNS such as Google's 8.8.8.8 for testing purposes?

M.


PTSD. BP. OCD. ASPD. BPD. Certified.
Re: Web Filter categorization disabled [message #114626 is a reply to message #114613] Thu, 03 July 2014 10:57 Go to previous messageGo to next message
Dukeman
Messages: 46
Registered: June 2007
Location: The Netherlands
I've seen this message as well yesterday, twice.

I'm running an internal DNS, but this server didn't had any errors/downtime.
Re: Web Filter categorization disabled [message #114634 is a reply to message #114626] Thu, 03 July 2014 13:13 Go to previous messageGo to next message
ictandme is currently offline  ictandme
Messages: 370
Registered: August 2009
Location: Netherlands

I have this problem also several times. I monitor Control on services level and when I have this problem my monitoring says DNS down. Second later UP again. This is always on the same time as Web filter has problem.

ICT and Me
Carlo Turk
The Netherlands
www.ictandme.com
Re: Web Filter categorization disabled [message #114645 is a reply to message #114634] Thu, 03 July 2014 16:43 Go to previous messageGo to next message
RMCholewa is currently offline  RMCholewa
Messages: 9
Registered: July 2014
Hi there,

I use my own DNS servers but yes, I have already tried to use google and openDNS as forwarders, same result.

Last night I went to the DNS tab in Kerio Control and checked the "Enable DNS cache for faster responses to repeated queries". Running ok for the last 12 hours. So far, no web filter issues. Will keep you posted.

Thank you!
Re: Web Filter categorization disabled [message #114687 is a reply to message #114645] Sat, 05 July 2014 17:15 Go to previous messageGo to next message
RMCholewa is currently offline  RMCholewa
Messages: 9
Registered: July 2014
After 2 days running smoothly, it started again:

[05/Jul/2014 09:26:17] DNS response timeout, Kerio Control Web Filter categorization disabled. Serial number: XXXXXXXXX
[05/Jul/2014 11:25:42] DNS response timeout, Kerio Control Web Filter categorization disabled. Serial number: XXXXXXXXX

Problem is, it seems that, once disabled, it won´t recover by itself and I have to manually go to the web filter tab, disable and re-enable it.

Do you guys know the dns name that kerio queries to register the web filter? I think I will try to add manual entries in the host table... is it "register.kerio.com"?

Thanks in advance.
Re: Web Filter categorization disabled [message #114872 is a reply to message #114605] Tue, 15 July 2014 14:45 Go to previous messageGo to next message
Teo is currently offline  Teo
Messages: 1
Registered: July 2014
Hello,

i have the same problem,
some times connect ok, but later it loss conection with the server.

Any idea?
Re: Web Filter categorization disabled [message #121501 is a reply to message #114605] Fri, 22 May 2015 17:27 Go to previous messageGo to next message
Matt W. is currently offline  Matt W.
Messages: 4
Registered: July 2013
Location: Austin, TX
+1 here on having the same issue. I see this is a rather old post, but it's currently May, 2015, and this is still a problem for us. Is it a Kerio Control bug? Or just an internal DNS/cache/forwarding configuration issue? Really curious to know if static host table entries for register.kerio.com are recommended as a workaround.
Re: Web Filter categorization disabled [message #121502 is a reply to message #121501] Fri, 22 May 2015 17:39 Go to previous messageGo to next message
Matt W. is currently offline  Matt W.
Messages: 4
Registered: July 2013
Location: Austin, TX
UPDATE: I noticed this thread was last updated on July 15, 2014, and I also just noticed on Control's Release Notes page that on v8.3.3 on July 22, 2015, Kerio "improved DNS timeout detection in Kerio Control Web Filter". Interesting... But I think my issues started *after* this time, not before.
Re: Web Filter categorization disabled [message #121571 is a reply to message #121501] Wed, 27 May 2015 00:25 Go to previous message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
Matt W. wrote on Fri, 22 May 2015 17:27
Really curious to know if static host table entries for register.kerio.com are recommended as a workaround.


That won't make any change as that server has nothing to do with WebFilter.

I'd recommend to enable DNS logging in debug log, there might be some hints why it's happening.


Petr Dobry
Product Development Manager | Kerio
Previous Topic: Unauthenticated access to HTTPS sites allowed whilst requiring authentication
Next Topic: VPN Tunel
Goto Forum:
  


Current Time: Tue May 30 00:15:46 CEST 2023

Total time taken to generate the page: 0.05499 seconds