Before you install FotoWeb

This topic details network requirements and other settings that you need to consider before setting up FotoWeb on a server.

20. August 2026

Table of Contents

System requirements Required ports

Before installing FotoWeb, make sure the server meets the system requirements and is configured to allow connections to the ports described below.
To see the system requirements for all products in the Fotoware On-premises suite, see System requirements.

System requirements

FotoWeb

Required ports

Your server must be configured to allow connections on the following ports:

Protocol	Port(s)	Affected servers	Details
Fotoware client-server communications	TCP 7000 / 7001	All Fotoware servers that run the Operations Center	TCP port 7000 (unencrypted) or 7001 (TLS, recommended) must be opened for system administrators to access the Operations Center and configure the server applications. This port is also used for communication between Fotoware server applications; for example, FotoWeb uses it to connect to indexes created on the Index Manager server. By default, the secure communications port (TLS) uses a self-signed certificate and is open for communications on port 7001. Learn more about securing Fotoware protocol communications using SSL in the Operations Center guide. If the FotoWeb server is placed in a DMZ, you will have to open this port for administrators on your internal network.
Communications between Index Manager and FotoWeb.	TCP 27017	FotoWeb	This port must be closed. Note: If this port is open for access from an external network, such as the internet, it poses a serious security liability. However, Index Manager pushes metadata to the FotoWeb server, so if Index Manager and FotoWeb run on different servers, the firewall on the FotoWeb server must allow incoming connections on port 27017. For more information, see Configuring Index Manager to deliver metadata to FotoWeb.
Fotoware log server	UDP 7000	FotoWeb	As stated in the system requirements, FotoWeb communicates with the Fotoware Log Server using UDP port 7000. You should therefore ensure that no other services on the server use this port and interrupt the logging service. Microsoft's DNS server can typically interfere with this port since it can be configured to use an arbitrary port. Therefore, if you are using Microsoft's DNS server, make sure it is explicitly configured not to allow connections on UDP port 7000.

Protocol

Port(s)

Affected servers

Details

Fotoware client-server communications

TCP 7000 / 7001

All Fotoware servers that run the Operations Center

TCP port 7000 (unencrypted) or 7001 (TLS, recommended) must be opened for system administrators to access the Operations Center and configure the server applications. This port is also used for communication between Fotoware server applications; for example, FotoWeb uses it to connect to indexes created on the Index Manager server.

By default, the secure communications port (TLS) uses a self-signed certificate and is open for communications on port 7001. Learn more about securing Fotoware protocol communications using SSL in the Operations Center guide.

If the FotoWeb server is placed in a DMZ, you will have to open this port for administrators on your internal network.

Communications between Index Manager and FotoWeb.

TCP 27017

FotoWeb

This port must be closed.
Note: If this port is open for access from an external network, such as the internet, it poses a serious security liability.

However, Index Manager pushes metadata to the FotoWeb server, so if Index Manager and FotoWeb run on different servers, the firewall on the FotoWeb server must allow incoming connections on port 27017.
For more information, see Configuring Index Manager to deliver metadata to FotoWeb.

Fotoware log server

UDP 7000

FotoWeb

As stated in the system requirements, FotoWeb communicates with the Fotoware Log Server using UDP port 7000. You should therefore ensure that no other services on the server use this port and interrupt the logging service. Microsoft's DNS server can typically interfere with this port since it can be configured to use an arbitrary port. Therefore, if you are using Microsoft's DNS server, make sure it is explicitly configured not to allow connections on UDP port 7000.

Before you install FotoWeb

System requirements

Required ports

Related Articles