GFI Support Home
Start a conversation
Sign in
Start a conversation
KerioControl
Articles
Public Articles
Section description:
Troubleshooting Slow Loading of a Specific HTTPS Site Through One Kerio Control Instance (Disable GRO Diagnostic)
Kerio Control DynDNS Update Failures After PPPoE Public IP Changes (VPN FQDN Reconnect Issues)
Kerio Control Web Filter Fails to Activate: “Server returned '(0) ko:31809::86399'” (Kerio Control 9.6.0 build 9189)
Kerio Control 9.6.0: Inconsistent Website Blocking and Web Filter Logs Showing Only IP (Fix: Update HTTPS Decryption “Local Authority” Certificate)
Kerio Control WebAdmin Fails to Load with “Error during translation file parsing” (9.6.1 build 9227, Spanish UI)
Kerio Control NG120 Freezing/Hanging Overnight: NVMe SSD Firmware Remediation (10.0.1 build 9247 / NVMe FW W11P54)
Kerio Control 9.6.1: IPS Stops Repeatedly with “Unknown error (1)” and Snort Rule Parse Error “PortVar Lookup failed on '$FTP_PORTS'”
Kerio Control Logs Show “Sorry, there is nothing to display!” and Services Fail with “Read-only file system” (Storage/Filesystem Issue)
Kerio VPN Client Always On Does Not Reconnect After Server Certificate Replacement (Post-Expiration Rotation)
Kerio Connect + Outlook Shared Mailbox Access Issues After Moving Default/System Folders
Third-Party IPsec VPN Clients Are Slow or Fail Behind Kerio Control (Mitigation: Per-Gateway Full Cone NAT Rule)
Kerio Control 9.6.1 Build 9227: Progressive RAM Growth and “Cannot allocate memory” Errors (Fixed in 9.6.1 Patch 1 Build 9272)
Kerio Control 9.6.1 (Build 9227): winroute Memory Growth Leading to Out-of-Memory (OOM) and Service Degradation
Kerio Control 9.6.1 Runaway Memory Growth and OOM (Fixed in 9.6.1 Patch 1, Build 9273)
External Website Does Not Load Through Kerio Control (HTTP/2 Blank Page / <code>net::ERR_HTTP2_PING_FAILED</code>) — GRO Workaround
Kerio Control WAN Marked Offline/Online with VPN Tunnel Drops (9.6.1 build 9227): Troubleshooting Gateway/Probe Timeouts vs. Self-Blocking Rules
Kerio Control 9.6.1 Build 9227: Intermittent “Internet Down” Events Caused by Memory Exhaustion (Fix: Build 9273/9287)
Troubleshooting Intermittent Webmail Access Failures Behind Kerio Control
Kerio Control 9.6.1 (Build 9227) on VMware: <code>winroute</code> Memory Leak and High RAM Usage
Troubleshooting Kerio Control 9.4.x After Applying a License Key File (Update/AV/IPS Failures and “Nothing Works”)
Kerio Control Add-On Services Show “Unlicensed” After License Renewal (Antivirus, Web Filter, Application Awareness)
External Website Does Not Load Through Kerio Control (Spinning Loading Wheel): Verify DNS Resolution
Troubleshooting Intermittent Browsing Failures via Kerio Control Non-Transparent Proxy (TCP/3128)
Kerio Control: Fixing <code>nslookup</code>/<code>dig</code> Failure Due to Missing <code>libjemalloc.so.2</code> (NG-Series Appliances)
Kerio Control 9.6.x: Web Filter Shows Not Activated/Disabled After Upgrade (Licensing/Activation Errors)
Kerio Control (NG310 / Build 9306): Multi-WAN Capability, Per-VLAN Failover Limitations, and NG310 Sizing Methodology
OpenVPN "Peer Certificate Verification Failure" in Kerio Control Caused by an Expired Built-In OpenVPN Local Authority
Kerio Control Reports Disk/<code>/var</code> Full but Deleting Logs Frees No Space (ext4 Filesystem Corruption)
Kerio Control: "License number was not found" on the Registration Portal When Upgrading a Hardware Appliance (Non-Genuine License)
Does My Kerio Control Software License Cover Hardware Replacement? (Understanding Warranty vs. License on NG-Series Appliances)
Kerio Control Multi-WAN: Periodic Appliance-Only DNS, Web Filter, Update, and AppManager Timeouts Caused by ISP Packet Loss Beyond the Gateway
Kerio Control: Autodesk Fusion Sign-In and Random HTTPS Sites Fail with ERR_CONNECTION_RESET (Cleared "Don't Fragment" Flag Triggering Upstream TCP Resets)
Kerio Control IPS Update Fails ("SSL peer certificate...was not OK" / "Signature is not valid") Behind an Upstream Firewall Performing SSL Inspection
OpenVPN Clients Time Out After Renewing the Certification Authority / Server Certificate in Kerio Control 9.6.1 Patch 1 (Fixed in Build 9364)
Kerio Control Site-to-Site VPN Passes Only Ping (ICMP): Diagnosing an MTU/Fragmentation Problem vs. a Cipher Mismatch
Throughput Drops ~50% Through Kerio Control While Direct Tests Are Full Speed: Diagnosing a Client-Side LAN Bottleneck (Not a Firewall Limit)
Blocking Domains from an External Feed (e.g., CERT.pl) in Kerio Control: Current Capabilities and Supported Workaround
Duplicate "Local Authority" Entries in Kerio Control SSL Certificates (Disabled Delete Is Expected — Fixed in Build 10.0.1 / Build 9380)
Kerio VPN Client Cannot Reach a Subnet Behind an IPsec Tunnel ("zeroconf disabled") — Add a Custom Route on the VPN Server
Kerio Control: Portal Tabs Intermittently Fail with "Hmm... I can't reach this page" (DNS_PROBE_FINISHED_NXDOMAIN) — a DNS Negative-Caching Issue, Not a Firewall Block
HTTPS Sites Stall or Fail Through Kerio Control (TLS Handshake ~21s, Large Responses Never Complete): GRO Coalescing of Fixed-IP-ID Traffic — Fixed in Build 9391
Some Kerio Control LAN Devices Get a DHCP Lease but No Internet: Diagnosing a Layer-2 Cross-Connect Between the LAN Port and a Secondary Port
Kerio Control VPN 2FA Fails When HSTS and Force SSL Are Enabled (HSTS Upgrades Port 4080 to HTTPS and Breaks the 4080→4081 Redirect)
Kerio Control 10.0.1 (Build 9380): Site-to-Site IPsec Tunnels Disconnect/Reconnect Every ~60 Seconds in Multi-WAN Same-Subnet Deployments (Fixed in Build 9387)
Kerio Control NG Upgrade Stuck at "Waiting for server restart…" — "mount: mounting /dev/sda2 on / failed: Device or resource busy"
Migrating Between Kerio Control NG Appliances (v9.x → v10.x): Config Import "A Higher Version Was Expected", VPN Routing to Static-Route Subnets, and v10 Hardware Recovery