Security issues regarding e-recruiting

[Former Member]

We have to access e-recruiting webdynpros from the internet, but we are using e-rec, HCM, and ERP in the same system, completely integrated.

We used the following as the reference documentation:

http://help.sap.com/saphelp_erp60_sp/helpdata/en/c0/f2dd5321e8424de10000000a174cb4/content.htm

Looking at the last architecture of the documentation, which use an integrated system (ERP/HCM/EREC in the same system), we didn´t understand why they put frontend external candidate system in the DMZ to increase the security. If we use webdispatcher in the DMZ to access the (ERP/HCM/EREC) system directly in the intranet(removing frontend system) via HTTPS, is not secure enough ?

Regards,

Luiz Felipe

[NicoleGeischnek · Accepted solution]

Hi Luiz Felipe,

The image you refer to is "Front-End and Backend on Different Systems (SAP E-Recruiting Integrated with ERP)"?

This one means that you have a distributed WD scenario but the WD backend system is the same system where HR is installed too. So the WD frontend is on an own system which is put in the DMZ for further security as this is the one users are logging on from outside your company network too.

Regards,

Nicole

[Former Member · Accepted solution]

Hi Nicole

First of all, thank you for the prompt reply. The image I am refering to is the one you mentioned: "Front-End and Backend on Different Systems (SAP E-Recruiting Integrated with ERP)".

We are wondering if we can change slightly the architecture (image) without harm the security. Our proposal is to put everything (ERP backend, HR backend, EREC backend and frontend) in the same system and put only the SAP Web Dispatcher in the DMZ. As we would use HTTPS to enhance the security, we think there is no need to install "front-end external candidate" separated from the integrated system. Are we right ?

Regards,

Felipe

[NicoleGeischnek · Accepted solution]

Hi Felipe,

That would be image "Front-End and Backend on One System".

It is your decision if you want to put the WD frontend system seperated or not but your constellation is also possible, yes.

Regards,

Nicole