SAP Web AS with Integrated ITS (SAP Library - SAP Web Application Server Security Guide)

SAP Web AS with Integrated ITS

As of SAP NetWeaver 04, the ITS is now integrated into the SAP NetWeaver component SAP Web Application Server as an Internet Communication Framework (ICF) service, which can, like other services, be accessed through the Internet Communication Manager (ICM). For more information, see Structure link Internet Communication Framework and Internet Communication Manager.

The security considerations are the same as for any other SAP Web AS service.

With the integrated ITS in the SAP Web Application Server, the Web browser can now communicate directly with the SAP System. Furthermore, all ITS-related sources, such as service files, HTML templates or MIME files, are now stored in the system's database, similar to ABAP sources.

The following changes are made by default so that the existing SAP Web AS infrastructure can be reused Web AS:

· The integrated ITS uses the common HTTP mechanism as in SAP Web AS, no additional Web server is required as, in the case of the standalone ITS.

· HTML templates and services files are stored in the SAP database, not in the file system.

· You can reuse ABAP software logistics for template and service distribution.

· The ITS registry is replaced by SAP profile parameters.

· The Work process roll area is used to handle ITS session information

· The integrated ITS is completely hidden behind SAP Web AS infrastructure

The security considerations are same as for to any other ICF service (for example, use transaction SICF). For more information see Structure link Security Aspects for Connectivity and Interoperability in the SAP NetWeaver Security Guide.

In the SAP Web AS environment, it is recommended to place an application gateway or SAP Web Dispatcher in the DMZ. This setup provides the same level of architectural security as the standalone ITS. Securing the integrated ITS amounts to securing SAP Web AS.

For more detail overview, refer to Structure link Using Multiple Network Zones and the security mechanisms used for the protocols listed in Network Security for SAP Web AS ABAP.