Secure Network Communications (SNC) 

Purpose

This component integrates an external security product with SAP Systems. With SNC, you strengthen the security of your SAP system by using additional security functions provided by an external product that are not directly available in SAP systems.

SNC protects the data communication paths between the various components of the SAP System. There are well-known cryptographic algorithms that have been implemented by the various security products, and with SNC, you can apply these algorithms to your data for increased protection.

Implementation Considerations

There are regulations in various countries that restrict the use of encryption in software applications. Pay close attention to the regulations that apply to your area of application.

Features

The following are some of the advantages of using SNC in your applications:

·        With SNC, you receive application-level, end-to-end security. All communication that takes place between two SNC-protected components is secured (for example, between the SAP GUI and an SAP system application server).

·        You can use additional security features that the SAP system does not directly provide (for example Single Sign-On or the use of smart cards).

·        You can change the security product at any time without affecting the SAP system business applications.

Constraints

The product that you use must meet the following requirements:

·        The product must provide the entire functionality defined in the standard interface, the GSS-API V2 (Generic Security Services Application Programming Interface Version 2). SNC uses this interface to communicate with the external security product.

·        The functions must be dynamically loadable.

·        The product must be available on platforms supported by SAP.

·        The product must be certified for use by SAP.

The SAP Cryptographic Library is available free-of-charge to customers to use for SNC connections between system components. For more information, see Using the SAP Cryptographic Library for SNC.

See also:

·        Configuring SNC (SAP J2EE Engine  ®  ABAP Engine)

·        Configuring SNC for Using the SAPCRYPTOLIB on the AGate (For the standalone Internet Transaction Server and where the SAP Cryptographic Library is the security product used.)

·        Configuring SNC on the WGate  (For the standalone Internet Transaction Server.)

·        Configuring SNC for Using the SAPCRYPTOLIB on the SAP Web AS (For an ABAP-based application server and where the SAP Cryptographic Library is the security product used.)

·        SNC User's Guide: This guide provides a full description of how to use SNC with SAP systems. You can find this guide on the SAP Service Marketplace at: service.sap.com/security   ®  Security in Detail  ®  Infrastructure Security   ®  SNC User’s Guide.

·        SAP Note 66687: Use of network security products