AS ABAP with Integrated ITS
The ITS is now integrated into the SAP NetWeaver AS ABAP as an Internet Communication Framework (ICF) service, which can, like other services, be accessed through the Internet Communication Manager (ICM).
The security considerations are the same as for any other AS ABAP ICF service.
With the integrated ITS in the AS ABAP, the web browser can now communicate directly with the AS ABAP system. Furthermore, all ITS-related sources, such as service files, HTML templates or MIME files, are now stored in the system database, similar to ABAP sources.
The following changes are made by default so that the existing AS ABAP infrastructure can be reused:
The integrated ITS uses the common HTTP mechanism as in the AS ABAP, no additional web server is required as in the case of the standalone ITS.
HTML templates and services files are stored in the SAP database, not in the file system.
You can reuse ABAP software logistics for template and service distribution.
The ITS registry is replaced by SAP profile parameters.
The work process roll area is used to handle ITS session information
The integrated ITS is completely hidden behind the AS ABAP infrastructure
The security considerations are same as for to any other ICF service (for example, use transaction SICF
).
Recommendation
In an AS ABAP system landscape, we recommend placing an application gateway or SAP Web Dispatcher in the DMZ. This setup provides the same level of architectural security as the standalone ITS. Securing the integrated ITS amounts to securing AS ABAP.