Overview

There are two ways to disable Kerio Control's protocol inspectors, this article covers both processes:

• In the Services section, to disable protocol inspection for all traffic.
• In the Traffic Rules section, to disable protocol inspection for traffic meeting the condition of the rule.

IMPORTANT: Disable protocol inspectors only for troubleshooting purposes. Disabling a protocol inspector may break the functionality within the protocol or prevent content from being scanned. Disabling SIP (Session Initiation Protocol) or FTP (File Transfer Protocol) protocol inspector may cause communication failures. 

Solution

Disabling protocol inspectors in services

Supposed that a communication to an Internet server does not work correctly. The HTTP protocol inspector stops the communication because it appears to be malicious. To troubleshoot, you can disable the HTTP protocol inspector to see if that solves the problem.

1. In Kerio Control's administration interface, go to Configuration > Definitions > Services.
2. Double-click the HTTP service.
3. In the Edit Service dialog box, in the Protocol inspector drop-down list choose None.
   
4. Save your settings.
   
   

Confirmation: Now try to access the HTTP server from the Internet. Enable the HTTP protocol inspector for the service and disable it in the particular traffic rule.

Disabling protocol inspectors in traffic rules

In Traffic Rules, you can disable protocol inspectors for a particular traffic rule. For this example, the HTTP server placed on the Internet is used:

1. In the administration interface, go to Configuration > Traffic Rules.
2. Right-click a table header and choose Columns > Inspector.
   
3. In any single rule, double-click the Inspector column and choose None.
   
4. Click Apply.

Confirmation: Kerio Control disables the protocol inspector for that traffic rule.