AS ABAP with Integrated ITS (SAP Library - Security Aspects for Connectivity and Communication with AS ABAP)

AS ABAP with Integrated ITS

The ITS is now integrated into the SAP NetWeaver AS ABAP as an Internet Communication Framework (ICF) service, which can, like other services, be accessed through the Internet Communication Manager (ICM). For more information, see Internet Communication Framework and Internet Communication Manager.

The security considerations are the same as for any other AS ABAP ICF service.

With the integrated ITS in the AS ABAP, the Web browser can now communicate directly with the AS ABAP system. Furthermore, all ITS-related sources, such as service files, HTML templates or MIME files, are now stored in the system's database, similar to ABAP sources.

The following changes are made by default so that the existing AS ABAP infrastructure can be reused:

● The integrated ITS uses the common HTTP mechanism as in the AS ABAP, no additional Web server is required as in the case of the standalone ITS.

● HTML templates and services files are stored in the SAP database, not in the file system.

● You can reuse ABAP software logistics for template and service distribution.

● The ITS registry is replaced by SAP profile parameters.

● The Work process roll area is used to handle ITS session information

● The integrated ITS is completely hidden behind the AS ABAP infrastructure

The security considerations are same as for to any other ICF service (for example, use transaction SICF). For more information see Security Guides for Connectivity and Interoperability Technologies.

In an AS ABAP system landscape, we recommend placing an application gateway or SAP Web Dispatcher in the DMZ. This setup provides the same level of architectural security as the standalone ITS. Securing the integrated ITS amounts to securing AS ABAP.

For a more detailed overview, see Using Multiple Network Zones and the security mechanisms used for the protocols listed in Network Security for AS ABAP.