Add something like cisco "show arp" to ip tools.

Full DNS Servise

Please add ipsec over https support to kerio control. On Lancom this is standard. Most offical hotspot disable ports other than 80, 443.

It would be nice if we could control service timeout.

I have a lot of clients who are using telnet and/or ssh protocol and if they are inactive for 40 minutes they will be disconnected. And they need to stay connected to the remote servers even if they are inactive for a longer period of time.

It is great that you can now use the Internet connection of the control box though the VPN client. It would be nice though if you could select this also on the VPN client or have the possibility to assign this feature on a per user basis in Control. Even though I like to use this feature for some users I don't want this behavior for all users. I have customers connecting though VPN for remote admin of their virtual machines in the datacenter, but I don't want them to use my Internet connection in the datacenter.

Было бы неплохо иметь возможность разрешить авторизовываться в Керио под определёнными учётками только с определённых IP-адресов или запретить таким учёткам авторизовываться с определённых IP-адресов - чтобы пользователи, например, которым запрещён выход в интернет, не могли выйти в интернет под случайно узнанной чужой учёткой.

Option to enter all possible connection details for IPsec tunnels, like ah instead of esp, etc. at least manualy via winroute.cfg, so anybody can fine-tune connection parameters if required for 3rd party HW/SW.

I would like the ability to schedule a restart after I have downloaded an update. I would like the ability to download the update and then set the Kerio control box to restart at say 3:00 am to install the update.

If Kerio Connect drops a connection for incoming SMTP rule, then Kerio Control should also drop that connection

so that all requests on port 80 are automatically redirected to 443.

Currently, the builtin DNS server does not listen on IPv6. So I can basically run everything on IPv6 only, but I need IPv4 to keep DNS requests inside.

Should be fairly trivial to implement.

Include in kerio proxy option X-Forwarded-For. This option is necessary for access to the site of the banks. Because this will avoid exceeding the protected by the protection thresholds of activity and global blocking of access to the resource

Hi good morning, could put on traffic rules (source) mac address

1- An option to include the full user activities with his Emailed report also the link to his Online activities inside the Kerio Control gateway.
2- An option to include this restricted site.

support multiCPU(multicore)
now used only 1 core(for NAT)

Please change new GeoIP filter to "Allowed countries", not Blocked as is now. Its crazy to add all hundred blocked countries to filter . Usually need customer only few countries as Allowed and if some client is blocked its much easier to add new "Allowed country" as to check huge list of Blocked...

Add more security /monitoring to Reverse Proxy by :

- Allow reverse proxy monitoring by logging incoming valid/invalid public server name request (date/time, source ip, requested name/URL, HTTP/HTTPS, valid/invalid)
- link IP addresses group to hostname to filter source

Multiple internet links - failover. Advanced monitoring / quality check of internet channel. Upon reaching a predetermined percentage of losses ping considered unfit channel and switch to the backup.

Добавить дополнительный мониторинг качества канала. При достижении заданного процента потерь пинга считать канал негодным и переключать на резервный.

some web application firewall on top of the reverse proxy. a break and Inspect function with WAF functionality