SAP system to be accessed over Internet

[Former Member]

Hi All,

There is SAP ECC 6.0 ABAP system. SAP server is installed on AIX 5.3. We need to access this system from Internet (laptop). Since there is Integrated ITS within the system, it was stated that it doesn't need SAP GUI for HTML.

Suggest what are the configuration options available so as to provide secure access to SAP system through Internet.

1. VPN - what configuration needs to be done?

2. Integrated ITS - What settings, parameters need to be configured within SAP system?

Thanks

[JPReyes · Accepted solution]

I think your best option is using a VPN tunnel.

Now for VPN's you don't need to do anything from SAP point of view, contact your IT Admin.

Regards

Juan

[former_member221634]

We have always installed SAP systems on internal servers and then mapped those servers to a public IP address so that our people could log on to any of our systems via the internet.

[Former Member]

Oh my, I hope you have many security experts keeping your SAP systems up to date including applying SAP recommended security configurations, installing SAP security notes, patching AS ABAP and AS JAVA systems, etc. If not, your systems are in danger. I agree with Juan, the only way I would expose SAP backend systems having any kind of sensitive information to the Internet would be through VPN.

[Former Member]

To further emphasize my point see . There are security vulnerabilities being discovered & made public in SAP products every month, some of them are remotely exploitable some of them aren't.