Proxy Server ( HTTP & Proxy No)

[pankaj_adhikari]

Hi All

We have added a proxy server (with IP & Port No). We tested two pages with Tcode-SE38--RSWF_TEST_HTTP--Entering URL-Execute & with Tcode-OAC0. The test was successful.

My question is

a) Does it mean that SAP can access only these two pages OR any page?

b) Does it mean that people/users can use access SAP system (say quality or production) from the port?

Regards

Pankaj

[behlau_carlos]

Hi Pankaj,

this can't be answered with a simple yes or no.

It depends on our security design and the services your SAP system is providing and how the network is secured.

Please keep in mind, the term "proxy" is usually called, as part of a network security strategy. Using a proxy do not mean, no services can by reached without proxy. If for example ICM components are listing, they can be reached, at least in LAN.

To secure your communication you would have closer look into SAP Router:

What is SAProuter? - SAProuter - SAP Library

But also here, this is part of a security design. You need to restrict your communication, to be done over SAP Router, but also on the network level.

Network and Communication Security - SAP NetWeaver Security Guide - SAP Library

Best regards

Carlos