Table of Contents
Securing communications between FotoWeb and Index Manager
This topic explains how the server-to-server communications work between Index Manager 8.0 and FotoWeb 8.0 and how to configure this connection in the Operations Center Settngs app.
20. August 2026
Table of Contents
Requirements for pushing Index Manager metadata to the FotoWeb database
When Index Manager hosts archives for a FotoWeb 8.0 server, it must be configured to push metadata to the FotoWeb server's database.
- Open Index Manager Settings and go to General.
- On the Indexes tab, select Push metadata to FotoWeb server.
If Index Manager and FotoWeb are on the same physical Windows server, you can connect to FotoWeb's metadata database by entering localhost:27017. If FotoWeb runs on a separate server, use the correct server name and ensure the firewall allows connections on port 27017. - Select Save, then restart the service to apply the changes.
When Index Manager restarts, it will poll the FotoWeb database until a connection can be established. You can find evidence of this in the Operations Center Status app's log.
Important firewall considerations
Port 27017, which is used to push metadata from Index Manager to FotoWeb, MUST NOT, under any circumstances, be accessible from any network where unauthorized people could access it.
Port 7000/7001, used for client communications from FotoWeb and Fotostation to Index Manager, SHOULD NOT be accessible from the Internet unless it is necessary to access Operations Center over the Internet. If this is necessary, we strongly recommend using HTTPS and opening only port 7001.
FWP Protocol requirements
When setting up archives on the FotoWeb server, each archive connects to an Index on the Index Manager service. This communication runs over the FWP/FWPS (secure, TLS) protocols on ports 7000 and 7001, respectively. If the FotoWeb and Index Manager servers are separate, the firewalls on these servers need to be configured to allow communication on these ports.
Tip
If the Index Manager and FotoWeb servers are separate and run in the same server room, using an unencrypted connection on port 7000 is recommended for performance reasons, since encryption is often not required for communication between servers in the same server room.