Your network infrastructure is extremely important in protecting your system. A well-defined network topology can eliminate many security threats based on software flaws (at both the operating system and application level) or network attacks such as eavesdropping.
SAP offers general recommendations to protect your system landscape based on SAP NetWeaver.
For information about the network security of SAP NetWeaver, see the SAP NetWeaver Security Guide on the SAP Service Marketplace at service.sap.com/securityguide → SAP NetWeaver Network and Communication Security.
A minimum security demand for your network infrastructure is the use of a firewall for all your services provided via the Internet.
A more secure variant is to protect your systems (or groups of systems) by locating the different "groups" in different network segments, each protected against unauthorized access with a firewall. (Note: external security attacks can also come from "inside" if the intruder has already taken over control of one of your systems.)
For information about access control using firewalls, see the SAP NetWeaver Security Guide on the SAP Service Marketplace at service.sap.com/securityguide → SAP NetWeaver Security Guide → Network and Communication Security - Using Firewall Systems for Access Control.