Security Settings in SAP Gateway 

Use

As the gateway is an application server interface to other systems (to other SAP systems, to external programs, and so on), security conditions must be met, as appropriate. In particular, if external programs are started via the gateway, you should use the security options described below.

Features

General

You should be aware of the following security issues for operating the gateway.

●      Authorizations for the side info file. Set the file attributes as described in Side Information Tables, to ensure the file is protected from unauthorized access.

●      Secure connections between gateways of different SAP Systems. To do this you have to set up SNC or use the SAProuter between the gateways, which de-encrypts and encrypts the data by SNC. For details see Configuring SNC Component Support

●      Activating gateway logging You can configure the gateway so that actions executed by the gateway and requests that it receives are written to a log file. You can find more information in  Setting Up Gateway Logging.

External Programs

Options for implementing security measures regarding external programs are described below.

●      You can prevent people without the appropriate authorizations from starting external programs. Assigning Start Authorizations for External Programs.

●      You can prevent external programs from being illegally registered with the SAP Gateway. Authorizations for Registering External Programs in the SAP Gateway.

●      You can regulate access by registered programs. Access Control for Registered Programs.

●      To find out how to use gateway logging to define security settings for external programs (in files reginfo and secinfo) refer to Making Security Settings for External Programs.

Parameters

You can find details of the parameters relevant for security settings under Security Parameters.

More Information

The SAP Gateway and the SNC Interface

Monitoring and Error Handling in the SAP Gateway