Skip to content

Network configuration and exchange security

Scan FME uses the HTTPS protocol.

Connectivity

For the Scan FME client to communicate correctly with the Isogeo servers, it must be ensured that :

  • your operating system can connect to port 443 to the scan.isogeo.com domain (20.216.177.162), using the secure HTTPS protocol (mandatory)
  • your browser can access the various websites managed by Isogeo (all our sites have domains ending in isogeo.com and use the secure HTTPS protocol and IP 20.216.177.162) such as https://app.isogeo.com (optional but useful for downloading the service from the interface on the server)

Proxy

If you need to configure a proxy to connect to the network, you'll need to enter its http url in the service installation directory (see Proxy configuration). This url must be obtained from your IT department for installation. A user/password pair is also required to authenticate to the proxy.


Security

Securing access and transmission

  • The Isogeo service (client component) communicates with the Isogeo platform for certain administration operations (geographic data scanning and synchronization). Authentication is by means of identifiers, and communication is encrypted between the agent and the platform (TLS 1.2 and 1.3).

  • Communication between the agent and the platform is initiated from the agent as an outbound flow only. There is no need to open specific inbound ports.

Controlling data access during automatic enumeration

  • Data access is via FME software

  • Data access is entirely configurable by the organization. All you need to do is grant access to databases and directories to the domain user who launches the service.

  • Data access depends on the type of data storage:

    • Database Management System (DBMS): all operating systems.
    • Files: you need to be able to provide the service with a Windows-type share (SMB protocol). In addition, they should be hosted on a server OS.
  • Data access is read-only, but some data providers require read/write access. Geographic data is not modified, but updates to index files or technical information may require write access.

  • The agent does not store any information for itself. However, it may generate potentially large temporary files, which it cleans up automatically.