Skip to Content

CRM Web Channel installation in DMZ

We are installing SAP CRM 7.0 EHP1. Our deployment includes CRM Order Management, the Interaction Center and the Web Channel, which will be used for our external customers to place orders via the web.

Our security team would like to install the Web Channel as a distributed scenario where the CRM server is in our core and the Web Channel is in the DMZ. Most of the documentation provided suggests a scenario where the SAP Web Dispatcher is in the DMZ but the Web Channel itself is in the core.

Is it possible to install the Web Channel in the DMZ with the Web Dispatcher?

The Planning Guide -

Add a comment
10|10000 characters needed characters exceeded

Related questions

4 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Aug 09, 2011 at 07:58 PM

    Hi Jennifer Nagel,

    It is very much possible to deploy the CRM web channel in DMZ along with SAP Web Dispatcher as well with Apache reverse proxy. But keep it in the mind that by deploying web channel in DMZ means you have to deal with more security policiies to protect your application.

    Hope this helps you.

    Paul Kondaveeti

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Aug 05, 2011 at 11:35 PM

    It is recommended to keep the Java applications (Java stack) behind the firewall. See the [SAP CRM 7.0 Ehp1 Security Guide|https://service.sap.com/%7Esapidb/011000358700001414212010E/sg_crm70_ehp1_april15_11.pdf|PARXLNS Consulting Inc, for your Web Channel solutions]..

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Aug 09, 2011 at 07:55 PM

    Hi Jennifer Nagel,

    It is very much possible to deploy the CRM web channel in DMZ along with SAP Web Dispatcher as well with Apache reverse proxy. But keep it in the mind that by deploying web channel in DMZ means you have to deal with more security policiies to protect your application.

    Hope this helps you.

    Paul Kondaveeti

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Sep 06, 2011 at 03:40 AM

    Thank you both. This has been very helpful. We are taking your advice and confirming if we can adequately secure our application with it in the DMZ. Page 214 in the security guide does suggest a web channel in the DMZ is standard and this has now been confirmed for our organization with another consultant.

    I may have more questions about the security but my primary question is answered.

    Thank you,

    Jennifer Nagel

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.