07-01-2025 06:11 AM
Hi All,
Webex survivability gateway connector comes online and then goes offline in some time. Sync happened once but after that getting the below error:
sync failed due to internal server error (code -31200)
Any suggestions on what could be causing this.
Thanks
Rajan
04-09-2026 02:33 AM
Hi Rajan,
Configure NTP from webex do not use you company NTP. When there is a couple of seconds different then you get this error.
07-01-2025 08:29 AM
The connector establishes an outbound connection to Webex over HTTPS (TCP 443).
If the firewall drops idle TCP connections too quickly, the connector appears to go offline intermittently.
This can cause sync errors or full disconnects from Control Hub.
Fix:
Ensure long-lived TCP connections are allowed through NAT/firewall.
Increase TCP idle timeout to at least 30 minutes.
Whitelist outbound traffic to:
*.wbx2.com
*.webex.com
*.cisco.com
Tip: Cisco recommends allowing WebSocket/HTTPS outbound on port 443 unrestricted.
If you're using a proxy or SSL inspection (e.g., in Zscaler, Palo Alto, etc.), it may:
Modify certificates
Interrupt WebSocket connections used by the connector
Fix:
Bypass Webex cloud domains from proxy/SSL inspection.
Allow direct connection for the connector host.
If the Survivability Gateway system clock is off by too much, Webex cloud auth or cert validation fails.
Fix:
Confirm system time is synced using a reliable NTP server.
Restart the connector after time is corrected.
If you've registered multiple connectors with the same location or org, it can lead to sync clashes.
Fix:
In Control Hub, check:
Devices → Survivability Gateway
Confirm there's only one connector active per location
Delete or re-register redundant ones
Some earlier versions of the connector had bugs causing service instability.
Fix:
Ensure you're running the latest version of WSG Connector.
Restart the connector service or reboot the host OS.
You can check logs in:
Restart the Connector
Verify time sync (NTP) and DNS resolution
Check firewall/NAT timeout policies
Temporarily disable any proxy to isolate
Confirm only one active connector per location in Control Hub
Check logs for code -31200 and surrounding messages
Enable debug logging on the connector (via CLI or config file)
Collect logs from /logs/ folder and open a TAC case with:
Org ID
Connector hostname
Full error message + timestamp
07-01-2025 11:41 AM
Thanks. Will check these and update.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide