SNC-Protected Communication Paths in SAP Systems
The following components support the use of SNC for connections.
Note
SNC protection only applies to connections that use SAP protocols (dialog, RFC or CPIC) protocols. For internet protocols, use SSL for protection.
From |
To |
Comment |
SAP GUI for Windows or SAP GUI for Java |
SAP system application server |
- |
SAP system application server |
SAP lpd |
- |
External RFC or CPIC program |
SAP system application server |
Example: SAP Java Connector |
SAP system application server |
External RFC or CPIC program |
Example: SAP Java Connector |
SAProuter |
SAP system application server |
- |
SAProuter |
SAProuter |
- |
Internet Transaction Server |
SAP system application server |
- |
You cannot apply SNC protection to the communication path between your application servers and your database. Therefore, we recommend that you keep your application and database servers in a secured LAN that is protected with a firewall and SAProuter (see the following figure).

Network Area Protected with SNC
You can also use SNC between two SAProuters to build a secure tunnel between networks (see the following figure).

SNC Protection between SAProuters