Overview

Clickjacking is a malicious technique where a user is tricked into clicking unintentionally on a disguised site element, thus probably routing the user to another unexpected page or causing an unforeseen event. In order to avoid clickjacking on the Kerio Control web interface, the remote management of it should be disabled.

Solution

1. Add your Kerio Control device to MyKerio to manage it using MyKerio.
2. Login to Kerio Control web interface as Administrator.
3. Go to Configuration > Traffic Rules.
4. Disable the Traffic Rule that allows Kerio Control administration from any source. This Rule is created by default:

1. Click on Apply.