Internet Transaction Server Security 

To link the SAP System applications to the Internet, we provide the middleware component Internet Transaction Server (ITS). The ITS allows for effective communication between the two systems, in spite of their technical differences.

In the topics that follow, we describe the system component architecture as well as the security measures and concepts necessary for providing security with SAP Internet applications. See:

·        Defining SAP Transactions as Internet Applications

·        The Architecture of the Internet Transaction Server (ITS)

·        A Secure Network Infrastructure for the ITS

·        Protecting the Server and Network Components

¡        Protecting the Web Server

¡        Protecting the AGate Server

¡        Protecting the SAP System Application Servers

¡        TCP Ports Used by the ITS

¡        Using the SAProuter

¡        Using Other Firewall Components

·        An Example Network Setup

¡        An Example Network Setup (with Client LAN)

·        Using Additional Security Mechanisms / Providing Privacy

·        Authenticating Users

¡        Authenticating Internet Users (Service Users)

¡        Authenticating Named Users With User ID and Password

¡        Authenticating Named Users Using X.509 Client Certificates

§         Security Measures When Using Client Certificates

·        Protecting Session Integrity

·        Setting Security Levels

·        Security-Relevant Settings for IACs

·        SAP Web AS with Integrated ITS

·        Additional Information on SAP Internet Applications and the ITS