Only SAP Fiori transactional apps are supported for consumption by Internet clients. This includes mobile devices that are not directly connected to the corporate intranet, for example when a user is travelling.
For the demilitarized zone (DMZ), we recommend that you deploy SAP Web Dispatcher (or any other reverse proxy). SAP Web Dispatcher should allow only requests that will be routed to the general internet communication framework (ICF) services or to Fiori apps that must be exposed.
In particular, we recommend blocking all requests to the following:
/sap/hba/* (SAP HANA XS)
/sap/es/* (Enterprise Search)
For more information about using multiple network zones, see the following documentation:
For SAP NetWeaver 7.31, see the SAP Help Portal at
.For SAP NetWeaver 7.40, see the SAP Help Portal at
.