Full DNS Servise

Please add ipsec over https support to kerio control. On Lancom this is standard. Most offical hotspot disable ports other than 80, 443.

It would be nice if we could control service timeout.

I have a lot of clients who are using telnet and/or ssh protocol and if they are inactive for 40 minutes they will be disconnected. And they need to stay connected to the remote servers even if they are inactive for a longer period of time.

For some projects need to increase bandwidth without splitting into a large number of network interfaces. It was enough to unite multiple interfaces according EEE802.3ad standard with a compatible networking equipment. This will greatly simplify the operation of Kerio Control and enhance the flexibility of its settings.

It is great that you can now use the Internet connection of the control box though the VPN client. It would be nice though if you could select this also on the VPN client or have the possibility to assign this feature on a per user basis in Control. Even though I like to use this feature for some users I don't want this behavior for all users. I have customers connecting though VPN for remote admin of their virtual machines in the datacenter, but I don't want them to use my Internet connection in the datacenter.

in kerio control i can monitor cpu load, meminfo using snmp in prtg.
but i can't monitor bandwidth traffic using snmp

please fix this

Было бы неплохо иметь возможность разрешить авторизовываться в Керио под определёнными учётками только с определённых IP-адресов или запретить таким учёткам авторизовываться с определённых IP-адресов - чтобы пользователи, например, которым запрещён выход в интернет, не могли выйти в интернет под случайно узнанной чужой учёткой.

Option to enter all possible connection details for IPsec tunnels, like ah instead of esp, etc. at least manualy via winroute.cfg, so anybody can fine-tune connection parameters if required for 3rd party HW/SW.

I would like the ability to schedule a restart after I have downloaded an update. I would like the ability to download the update and then set the Kerio control box to restart at say 3:00 am to install the update.

If Kerio Connect drops a connection for incoming SMTP rule, then Kerio Control should also drop that connection

so that all requests on port 80 are automatically redirected to 443.

Currently, the builtin DNS server does not listen on IPv6. So I can basically run everything on IPv6 only, but I need IPv4 to keep DNS requests inside.

Should be fairly trivial to implement.

Include in kerio proxy option X-Forwarded-For. This option is necessary for access to the site of the banks. Because this will avoid exceeding the protected by the protection thresholds of activity and global blocking of access to the resource

Hi good morning, could put on traffic rules (source) mac address

1- An option to include the full user activities with his Emailed report also the link to his Online activities inside the Kerio Control gateway.
2- An option to include this restricted site.

Please change new GeoIP filter to "Allowed countries", not Blocked as is now. Its crazy to add all hundred blocked countries to filter . Usually need customer only few countries as Allowed and if some client is blocked its much easier to add new "Allowed country" as to check huge list of Blocked...

Add something like cisco "show arp" to ip tools.

Add more security /monitoring to Reverse Proxy by :

- Allow reverse proxy monitoring by logging incoming valid/invalid public server name request (date/time, source ip, requested name/URL, HTTP/HTTPS, valid/invalid)
- link IP addresses group to hostname to filter source

Multiple internet links - failover. Advanced monitoring / quality check of internet channel. Upon reaching a predetermined percentage of losses ping considered unfit channel and switch to the backup.

Добавить дополнительный мониторинг качества канала. При достижении заданного процента потерь пинга считать канал негодным и переключать на резервный.

Need an option to create custom IP black lists to be able to block larger groups of IP addresses. I have multiple clients and installations that would desire to block all of China, India and Russia, as well as some other countries, that could easily be defined by custom rules. They would need to be updated more often, but it is a highly requested option from my clients. Another alternative would be to fully integrate GeoIP blocking as well, with definitions that are updated daily to help protect networks.