What’s new in Kerio Control

Version 9.3.1

Released: September, 17 2019

Release notes


  • HA Disconnect Kerio VPN on passive slave
  • HA VLANs removed on sync from Master to Slave
  • HA Bandwidth management link speed is not persistent on slave
  • HA Fails to Start
  • HA Several improvement and network compatibility fixes
  • Some Web pages are not blocked and can be accessed via Bing search
  • 3rd party IPsec VPN tunnel not being established due to unknown crypto suites
  • Update to driver for PCI Network Card Intel X710-T4
  • IPSec VPN tunnel failed to reconnect after an interruption on the remote side since 9.3.0
  • Kerio Interfaces staying "no connectivity" even when there is a connection
  • An unauthorized user can access the internet with the help of authorized users
  • Malicious URL to Kerio Control login page can be used to inject code in session

Customers with a
valid subscription are
entitled to a FREE upgrade.
Download the latest version

Downloads and Upgrades:

For product downloads and information about upgrading Kerio Control, visit the GFI Upgrade Center.

If you have additional queries about these changes, please do not hesitate to contact us or an authorized GFI Partner directly.

Version 9.3

Released: April, 9 2019

Release notes



Version 9.2.9

Released: January, 31 2019

Release notes



Note: Older Kerio VPN Clients are not able to connect using this build. To allow please follow the following steps.

Open ssh connection or from console
Go to /opt/kerio/winroute folder
Run ./tinydbclient "Update VPN set AllowBlowfishCipher=1"

Version 9.2.8

Released: November 27, 2018

Release notes



Note: Kerio Control VPN Client does not work with previous versions of Kerio Control (version 9.2.7 and earlier)

Version 9.2.7

Released: September 4, 2018

Release notes



Version 9.2.6

Released: May 16, 2018

Kerio Control 9.2.6 includes security enhancements to allow encryption of personal and sensitive data collected and stored by the product.

Release notes



Version 9.2.5

Released: March 22, 2018

Kerio Control 9.2.5 provides security improvements with an upgrade to the IPSEC VPN encryption key and complete removal of PHP code in the server code base. This release also includes over 20 customer reported fixes.

Release notes



9.2.5 Patch 1

9.2.5 Patch 2

9.2.5 Patch 3

9.2.5 Patch 4

9.2.5 Patch 5

Version 9.2.4

Released: October 26, 2017

Kerio Control 9.2.4 provides a WiFi security update to the WPA2 protocol for the NG100W and NG300W hardware appliances.

Release notes


Version 9.2.3

Released: August 21, 2017

Kerio Control 9.2.3 brings fixes for customer reported issues including a Security Settings error and fixes a possible loop that resulted in the CPU locking.

Release notes



Version 9.2.2

Kerio Control 9.2.1 brings you significant performance improvements in all Kerio Control's security and inspection methods and filters. For example:

Kerio Antivirus

Kerio Control 9.2.2 introduces Kerio Antivirus. Kerio Antivirus is powered by the Bitdefender antivirus engine and replaces the current Sophos Anti-Virus.

When upgrading to Kerio Control 9.2.2 from earlier versions, Kerio Antivirus automatically replaces the Sophos Anti-Virus.

Read more in our Knowledge Base: Configuring antivirus protection.

Kerio Control hardware devices support Wi-Fi

Kerio Technologies launches Kerio Control NG100W and Kerio Control NG300W hardware devices with embedded WiFi access point which provide connectivity for wireless devices such as cell phones, tablets, and laptops. The Kerio Control WiFi module supports:

Read more in our Knowledge Base:

Optimizing performance with LSO

Kerio Control includes large segment offload, also referred to as generic segmentation offload. LSO allows the network interface controller to process the segmentation of a data transfer and significantly improves performance. However, these improvements are noticeable only during large data transfers, such as file downloads, or video streams.

The throughput gain depends on the particular deployment. For example, you can expect up to 400 Mbps on the Kerio Control NG100 hardware appliance.

Read more in our Knowledge Base: Optimizing performance with large segment offload.

Blocking incoming connections from specified countries

Kerio Control allows you to filter incoming traffic by country (GeoIP). Kerio Control then blocks all IP addresses that belong to the countries specified in the filter.

Read more in our Knowledge Base: Blocking all incoming connections from specified countries.

IPsec VPN tunnel configuration update

Kerio Control 9.2 adds a detailed configuration for IKE and ESP ciphers used in IPsec VPN tunnels. With this detailed configuration you can easily create IPsec VPN tunnels with third-party firewalls.

Read more in our Knowledge Base: Configuring IPsec VPN tunnel.

Changes in system requirements

Added support

Discontinued support

For more details, see Kerio Control technical specifications.


Kerio Control does not permit upgrades from versions older than 8.0.