Internet Transaction Server Security
Defining SAP Transactions as Internet Applications
The Architecture of the Internet Transaction Server (ITS)
A Secure Network Infrastructure for the ITS
Protecting the Server and Network Components
Protecting the Web Server
Protecting the AGate Server
Protecting the SAP System Application Servers
TCP Ports Used by the ITS
Using the SAProuter
Using Other Firewall Components
An Example Network Setup
An Example Network Setup (with Client LAN)
Using Additional Security Mechanisms / Providing Privacy
Authenticating Users
Authenticating Internet Users (Service Users)
Authenticating Named Users With User ID and Password
Authenticating Named Users Using X.509 Client Certificates
Security Measures When Using Client Certificates
Protecting Session Integrity
Setting Security Levels
Security-Relevant Settings for IACs
SAP Web AS with Integrated ITS
Additional Information on SAP Internet Applications and the ITS