Communication Using SAProuter

SAProuter

SAProuter is a program that transmits SAP data (SAPgui, Remote Function Call, ...) between IP subnets or within a subnet. Therefore, a SAProuter cannot replace a conventional router. The SAProuter program is most often used if SAP network connections are to be sent specifically and safely from its own network to an external site, or from the external site into the network. This type of program is also described as an application level gateway.

SAProuter Tasks

You must use a SAProuter if a direct IP connection cannot be made between the communication partners. This can occur, for example, if the frontend with the SAPgui program cannot directly address the R/3 server, since both IP addresses belong to different IP networks.

SAProuter, which must run on a host that is connected with both IP networks, can receive data from the SAPgui in an IP network, and can send data to the R/3 server in another IP network and vice versa.

SAProuter analyzes the incoming data packets and forwards them to the target after checking the route and the authorizations. The partner who establishes the connection determines the route (from SAProuter to SAProuter, and at which time). Normal IP routing occurs between the application programs and the SAProuters.

SAProuter enables you to completely separate IP networks or subnets, and should be used in the following scenarios:

You can install a SAProuter at a later time. In this case, you must supplement the call parameters of the client.

Security Aspects of the SAProuter

Networks are usually protected against unauthorized external access by using a firewall.

Firewalls are based on setting up a lock between the internal network and external networks. There are several degrees of protection:

In this graphic, a SAProuter is used to control the branched connection. This can be useful if only some of your employees are allowed to communicate externally, or if the communication processes need to be logged.