Network Security
Your network infrastructure is an important element in protecting your SAP NetWeaver systems. The network topology for the AS Java is based on the topology used by the SAP NetWeaver platform.
SAP systems are implemented as client-server frameworks built in three levels: database server level, application server level and the presentation level (front ends). The AS Java works at the database and application levels in your implementation framework, where it defines and forwards the presentation logic to Web client applications, such as, for example Web browsers and Web Dynpro applications.
Therefore, when deploying the AS Java in your network landscape, we recommend that you use a network topology with multiple network security zones as shown in the figure below.
Network Topology with Multiple Security Zones
See the following sections for more details on the transport layer and communication channel security aspects that specifically apply to the AS Java:
· Communication Channel Security
For a complete list of the default ports used by SAP NetWeaver products and their default assignments, see the document TCP/IP Ports Used by SAP Server Software, which is available on the SAP Service Marketplace at http://service.sap.com/security.
See also:
Network and Transport Layer Security