Show TOC

 Internet-Facing Deployment Locate this document in the navigation structure

 

Only SAP Fiori transactional apps are supported for consumption by Internet clients. This includes mobile devices that are not directly connected to the corporate intranet, for example when a user is travelling.

For the demilitarized zone (DMZ), we recommend that you deploy SAP Web Dispatcher (or any other reverse proxy). SAP Web Dispatcher should allow only requests that will be routed to the general internet communication framework (ICF) services or to Fiori apps that must be exposed.

In particular, we recommend blocking all requests to the following:

  • /sap/hba/* (SAP HANA XS)

  • /sap/es/* (Enterprise Search)

More Information

For more information about using multiple network zones, see the following documentation:

  • For SAP NetWeaver 7.31, see the SAP Help Portal at   http://help.sap.com/nw731   Security Information   Security Guide   Network and Communication Security   Using Multiple Network Zones  .

  • For SAP NetWeaver 7.40, see the SAP Help Portal at   http://help.sap.com/nw74   Security Information   Security Guide   Network and Communication Security   Using Multiple Network Zones  .