Kerio Technologies
  • Latest version:

    8.2.2 Patch 2
    Released on:


    Prior to installation, please read the Quick Start Guide.

    Product Updates for Existing Users

    Kerio Control Software Appliance

    Kerio Control VMware Virtual Appliance (VMX)

    Kerio Control VMware Virtual Appliance (OVF)

    Kerio Control Hyper-V Virtual Appliance

    Kerio Control Update Image


    Kerio VPN Client

    Windows 2000/XP/2003/Vista/2008/7/8

    Kerio VPN Client (32-bit)

    Kerio VPN Client (64-bit)


    OS X

    Kerio VPN Client


    Debian and Ubuntu Linux - Installation Instructions

    Kerio VPN Client (32-bit)

    Rescue flash image

    Hardware Detection Tool image

    USB diagnostic tool image

    USB script for factory reset

    USB script for password reset

    USB script for upgrade


    Interested in joining the beta testing program? Sign up today.

  • Latest version:

    8.2.2 Patch 2
    Released on:


    Prior to installation, please read the Quick Start Guide.

    System Requirements

    Software Appliance

    CPU: 500 MHz
    Memory: 1.5 GB RAM
    Hard drive: 8 GB HDD space for OS, product, logs and statistics data
    Network interface: 2 Ethernet (10/100/1000 Mbit)
    HW: Kerio Control is based on Linux kernel version 3.2. Hardware supported by this kernel is required. For list of supported hardware see e.g.

    VMware Virtual Appliance

    VMware hypervisor
    VMware Workstation 8.0 or 9.0
    VMware Fusion 4.0 or 5.0
    VMware Player 4.0 or 5.0
    VMware ESX 4.1
    VMware ESXi / vSphere Hypervisor 4.1, 5.0 or 5.1

    CPU: 2 GHz
    Memory: 1.5 GB RAM assigned to the virtual machine
    Hard drive: 8 GB assigned HDD space for OS, product, logs and statistics data
    Network interface: 2 assigned virtual network adapters

    Hyper-V Virtual Appliance

    Hyper-V hypervisor
    Windows Server 2012 R2
    Windows Server 2012
    Windows Server 2008 R2

    CPU: 2 GHz
    Memory: 1.5 GB RAM assigned to the virtual machine
    Hard drive: 8 GB assigned HDD space for OS, product, logs and statistics data
    Network interface: 2 assigned virtual network adapters

    Kerio VPN Client


    Operating systems:
    Windows 8.1 (all editions except RT)
    Windows 8 (all editions except RT)
    Windows 7 (all editions)
    Windows XP (all editions)
    Windows Vista (all editions)
    Windows 2000 Professional
    Windows Server 2012 R2 (all editions except Core)
    Windows Server 2012 (all editions except Core)
    Windows Server 2008 R2 (all editions except Core)
    Windows Server 2008 (all editions except Core)
    Windows Server 2003 R2 (all editions)
    Windows Server 2003 (all editions)
    Windows Server 2000 (all editions)

    *Latest service pack and up to date security patches are required unless otherwise stated.

    OS X

    Operating systems:
    OS X 10.8 Mountain Lion
    OS X 10.9 Mavericks

    *Latest updates are a requirement unless otherwise stated.


    (32-bit editions and 64-bit editions with multiarch i386 libraries are supported)
    Operating Systems:
    Debian 7
    Ubuntu 12.04 to 13.10

    IPsec VPN client devices

    Android 4
    Apple iOS 6 and 7

    Client Web Browsers

    Basic User Login/Logout

    All HTTP(S)-compliant web browsers including mobile browsers are supported.

    Kerio Control Administration and Kerio Control Statistics

    CPU: 1 GHz (2.4GHz dual-core for best performance)
    Memory: 1 GB RAM (512 MB on Windows XP with Firefox or Google Chrome)
    Microsoft Internet Explorer 8 to 11
    Firefox 3.6 and newer
    Safari 4 to 7
    Google Chrome 8 and newer

    Kerio Control Administration, mobile devices

    Apple iPad (iOS 5 and newer)
    Android 4


    Kerio Control Box 1120

    Kerio Control Box 3120

    Hardware Models (only available in US, Canada, Australia and EU)

    Users included (add-on user licenses available)
    5 users
    5 users
    Kerio Control with Sophos Antivirus and Kerio Control Web Filter


    Desktop - fan-less design
    1U rack mount unit
    Dimensions (in/mm)
    9.8 x 7.6 x 1.6 in / 250 x 194 x 40 mm
    16.8 x 10.7 x 1.7 in / 426 x 272 x 44 mm
    Weight (lb/kg)
    4,4 lb / 2.0 kg
    15 lb / 6.8 kg
    6 x 10/100/1000 RJ-45
    8 x 10/100/1000 RJ-45
    Other ports
    2 x USB 2.0, 1 x RJ-45 console port
    2 x USB 2.0, 1 x RJ-45 console port
    Power input
    Hard disc drive
    32 GB SSD
    32 GB SSD
    4 GB
    2 GB
    Intel Atom Dual Core 1.8 Ghz
    Intel Pentium Dual Core 2.6 Ghz
    Standard 1-year warranty
    Standard 1-year warranty


    90 Mbit/s
    400 Mbit/s
    Antivirus (32 kB files)
    50 Mbit/s
    150 Mbit/s
    UTM (32 kB files)
    40 Mbit/s
    125 Mbit/s
  • Latest version:

    8.2.2 Patch 2
    Released on:


    Please read the Release History.

    Introducing Kerio Control 8.2

    Content filter

    The times when a firewall configuration meant blocking some port and permitting another are gone. These days many applications use random TCP/UDP ports and administrators want to block particular activities rather than ports. This version of Kerio Control introduces Content Filter able to block Kerio Web Filter categories and different types of application protocols regardless of a used port. This filtering on different network layers is easily configured by a single set of rules similar to Traffic Policy.

    HTTP protocol inspection on IPv6

    The adoption of IPv6 constantly increases. This version of Kerio Control adds IPv6 support to HTTP protocol inspection, bringing Antivirus, Kerio Web Filter and enabling content filtering on this protocol.

    L2TP interface

    To deliver Internet to customers, internet service providers sometimes use the L2TP interface. With L2TP interface type support you can connect Kerio Control directly to such Internet line.

    Upgrade from previous versions

    Although we made the Content Filter to cover the vast majority of features of previous ver- sions, upgrade of some HTTP and FTP rules might not be possible. In such case the rule is disabled and message is logged into the warning log. Please check your rules and warning log after upgrade.

    PAE enabled in Linux kernel

    In order to support more than 4 GB of RAM we enabled PAE support in Linux kernel. The downside of this feture is that the kernel will not boot on CPU without PAE technology. It applies to Intel Pentium (first generation), AMD Geode LX, VIA C3 and similar processors. Before installing Kerio Control please verify the CPU capabilities.

    Full List of Changes in Kerio Control 8.2.2 patch1

    Changes in 8.2.2 patch1

    Fixed: possible deadlock in Content Filter

    Changes in 8.2.2

    • Pre-windows 2000 account name is now used if user have secondary UPN suffix in Active Directory
    • Fixed: Stability issue in User database
    • Fixed: Forbidden words was always disabled after reboot
    • Fixed: Kerio Control Administration: Several minor stability issues

    Changes in 8.2.1

    • Content Filter: File name is now detected also in URL
    • Kerio VPN Client: Driver is not installed to /System/Library/Extensions on OS X 10.9 Mavericks
    • Fixed: Content rule URL condition "*" incorrectly matches non-HTTP connections
    • Fixed: Stability isuue in HTTP protocol inspector
    • Fixed: HTTP cache TTL was not computed correctly
    • Fixed: Kerio Control Administration: several stability issues

    Changes in 8.2.0

    • Content Filter feature replaces HTTP and FTP policy
    • Added L2TP interface type
    • PAE was enabled in Linux kernel, more than 4GB of RAM are now detected
    • IPv6 support was added to HTTP protocol inspection
    • Space occupied by HTTP cache is now reported in storage space management
    • Enabled workaround for poor performance of particular TCP connections in VMWare vmxnet driver
    • Backup DNS servers are now detected in Active Directory domain
    • HTTP proxy server now supports method OPTIONS
    • Kerio Control Administration: definitions can be edited directly from the policy screens
    • Kerio Control Administration: unsupported Ethernet port speed / duplex is now re- ported
    • Kerio Control Administration: particular screen can be opened by URL bookmark
    • Fixed: Kerio Control Administration: Properties of user named "admin" from Active Directory are now editable
    • Added support for Internet Explorer 11 and Safari 7 browsers
    • Kerio VPN Client: Added support for OS X 10.9 Mavericks, dropped support for Mac OS X 10.7 Lion and older

    Open Source Software Notice

    Kerio Control includes open source software. The complete open source code packages of these components are available in Kerio Software Archive at

    Legal Notice

    Microsoft®, Windows®, Active Directory® and Internet Explorer® are registered trademarks of Microsoft Corporation.
    Apple®, Mac OS® and Safari™ are registered trademarks or trademarks of Apple Inc.
    Snort® is a registered trademark of Sourcefire, Inc.
    VMware® is a registered trademark of VMware, Inc.
    Sophos® is a registered trademark of Sophos Plc.
    Google™, Android™ and Chrome™ are trademarks of Google Inc.

Introducing Kerio Control 8.2

Introduces Content Filter a feature which will save Administrators time blocking multiple ports. REGISTER »

Kerio Control Datasheet

Overview of Kerio Control, highlighting the many features and benefits. LEARN MORE »

Yachtcomputing Case Study

Kerio Control's usage and traffic statistics put it at the top of the list for the yacht. LEARN MORE »