Overview

You might be experiencing an issue with the content filter in Kerio Control. Despite being added as an exception, users are unable to access a specific website, or it does not load properly. You might have tried adding the website (example: *.microsoftonline.com) as a wildcard to the filter, but the issue persists.

Solution

To resolve the issue with the content filter in Kerio Control, follow these steps:

1. Enable HTTPS decryption as per Filtering HTTPS Connections.
2. Add the URL *.microsoftonline.com with a wildcard on the ending side of the URL.
3. If the issue persists, follow these steps to identify the domains required for the website to function properly:
   • Log in on a system without Kerio Control (or from a system that does allow everything through the content filter).
   • Press F12 in Chrome on an empty tab (Edge has the same toolkit, just press Open DevTools).
   • Select the Network tab.
   • Make sure the "Preserve Log" and "Disable Cache" checkboxes are selected.
   • Right-click on the table headers and ensure "Domain" is checked.
   • Now put the link in and hit enter so that it opens the site in the tab with the Developer Tools open.
   • It will record all the traffic while you go through the login to the site and will show you all the domains involved.
   • Sort by the domain name and you'll get the list.
   • Compare it with the ones you have in the rule and add the missing ones.
4. If you see requests failing in the Status row (when the Status column is enabled) and get marked in red, this is an indication that the connection gets lost due to either the Content Filter or the Traffic rules. Add the missing domains to the ruleset.
5. If the issue still persists, consider contacting the Kerio Control support team for further assistance.

Summary

This article provides a step-by-step guide to troubleshoot and resolve issues with the content filter in Kerio Control. The solution involves enabling HTTPS decryption, adding users to the content rule, adding a URL with a wildcard, and identifying the domains required for the website to function properly.

FAQ

1. What should I do if the issue persists even after following the steps?
   If the issue still persists, consider reaching out to the support team for further assistance.
2. How can I identify the domains required for the website to function properly?
   You can identify the domains by logging in on a system without Kerio Control, opening the Developer Tools in Chrome or Edge, selecting the Network tab, and recording all the traffic while you go through the login to the site.
3. What does it mean if I see requests failing in the Status row and get marked in red?
   This is an indication that the connection gets lost due to either the Content Filter or the Traffic rules. You should add the missing domains to the ruleset.