SAProuter is an SAP program that serves as an intermediate station (proxy) in a network connection between R/3 Systems or programs. It controls access to your network (application level gateway): This makes it a useful extension to an existing firewall system (port filter). A firewall forms a secure "wall" around your network. However, some connections have to be allowed through the wall. This means that the wall has to have a "hole". SAProuter controls this hole and gives you complete control over access to your R/3 System.

You can use SAProuter to:

• Control and log the connections to your R/3 System, e.g. from an SAP service center
• Set up an indirect connection when programs involved in the connection cannot communicate with each other due to the network configuration.

• Address conflicts when using non-registered IP addresses
• Restrictions which exist for firewall systems

• Improve network security by

• Protecting your connection and data from unauthorized external access with a password
• Allowing access from only particular SAProuters
• Only allowing encrypted connections from a known partner (using the SNC layer)

• Increase performance and stability by reducing the R/3 System load within a local area network (LAN) when communicating with a wide area network (WAN).

The following graphic illustrates your network (LAN) using a firewall as protection against access from outside. There is SAProuter running on the firewall host serving as "door" to your network. This door is only opened for connections you allow.

It is often useful if there is a connection from SAP to your R/3 System. In the SAPNet R/3 frontend (previously referred to as OSS), you can see important information and notes and SAP employees can log onto your system if there are problems, etc. These connections are controlled with SAProuter.