Network Security

Your network infrastructure is an important element in protecting your SAP NetWeaver systems. The network topology for the AS Java is based on the topology used by the SAP NetWeaver platform.

SAP systems are implemented as client-server frameworks built in three levels: database server level, application server level and the presentation level (front ends). The AS Java works at the database and application levels in your implementation framework, where it defines and forwards the presentation logic to Web client applications, such as, for example Web browsers and Web Dynpro applications.

Therefore, when deploying the AS Java in your network landscape, we recommend that you use a network topology with multiple network security zones as shown in the figure below.

Network Topology with Multiple Security Zones

See the following sections for more details on the transport layer and communication channel security aspects that specifically apply to the AS Java:

• Transport Layer Security
• Communication Channel Security
• AS Java Ports
  Note

  For a complete list of the default ports used by SAP NetWeaver products and their default assignments, see the document TCP/IP Ports Used by SAPServer Software, which is available on the SAPService Marketplace at http://service.sap.com/security.