The following table shows the communication channels used by the SAP Fiori apps, the protocol used for the connections, and the type of data transferred:
Communication Path | Protocol Used | Type of Data Transferred |
---|---|---|
Web browser to SAP Web Dispatcher | OData HTTP/HTTPS | Application data and security credentials |
SAP Web Dispatcher to ABAP front-end server (SAP NetWeaver Gateway) | OData HTTP/HTTPS | Application data and security credentials |
SAP Web Dispatcher to HANA XS | OData HTTP/HTTPS | Application data and security credentials |
SAP Web Dispatcher to ABAP back-end server (ERP, CRM, SRM, SCM) | INA HTTP/HTTPS | Application data and security credentials (for search and back-end transactions) |
ABAP front-end server to ABAP back-end server (ERP, CRM, SRM, SCM) | RFC | Application data and security credentials |
ABAP back-end server to SAP HANA / any DB | SQL | Application data and security credentials |
To ensure confidentiality and integrity of data, we recommend encrypting all communication channels as follows:
Protect HTTP connections by using Transport Layer Security (TLS) or Secure Sockets Layer (SSL).
Protect RFC connections by using Secure Network Communications (SNC).
Protect SQL connections by using Secure Sockets Layer (SSL) or Transport Layer Security (TLS).
For information about setting up communication encryption for SAP NetWeaver, see the following documentation:
For SAP NetWeaver 7.31, see the SAP Help Portal at
.For SAP NetWeaver 7.40, see the SAP Help Portal at
.For information about setting up communication encryption for SAP HANA, see the SAP Help Portal at
.