Deployment Options

Deployment of SAP Gateway

Recommendation

For running SAP Fiori apps, we recommend that you use a Central Hub Deployment of SAP Gateway. This means that you install SAP Gateway independent of consumer technologies in a standalone system, either behind or in front of the firewall. You therefore separate back end components from front-end components.

We do not recommend the Embedded Deployment option. This document is entirely based on the Central Hub Deployment option.

Intranet Deployment

You can deploy SAP Fiori apps in the intranet, that is, inside your corporate network.

The SAP Fiori documentation focuses on the intranet deployment scenario.

When accessing SAP Fiori apps over the Internet, that is, from outside the corporate network, you have to perform additional tasks. For more information, see Internet-Facing Deployment.

Internet-Facing Deployment

Recommendation

When setting up SAP Fiori apps for consumption from outside the corporate network, we recommend that you deploy SAP Web Dispatcher (or any other reverse proxy) in the demilitarized zone (DMZ).

Recommendation

In addition, we highly recommend using Web Application Firewall capabilities in the reverse proxy or using an additional Web Application Firewall as first line of defense, especially when consuming SAP Fiori analytical apps or search capabilities over the Internet.

SAP Web Dispatcher (or the reverse proxy) should only forward requests to services in the internet communication manager that are necessary to run SAP Fiori apps.

There are services to run the SAP Fiori launchpad and services to run the specific apps:

For the services to run the SAP Fiori launchpad, see Activate SICF Services for SAP Fiori Launchpad.
For the services to run the specific apps, see the app-specific documentation.

For information about how to activate the specific services, see Front-End Server: Activate ICF Services of SAP UI5 Application.

For an internet-facing deployment of mobile devices, you can use the SAP Mobile Platform Server. SAP Mobile Platform Server is an open, standards-based application server that provides a suite of services for mobile applications. By integrating SAP Mobile Platform Server into your SAP Fiori system landscape, you can create a secure, efficient, and easy-to-manage mobile environment for SAP Fiori.

More Information

For more information about SAP Mobile Platform Server, see Integration of SAP Mobile Platform into SAP Fiori Landscape.

For more information about SAP Gateway deployment options, see the following documentation:

For SAP NetWeaver 7.31, see SAP Help Portal at http://help.sap.com/nwgateway20 Installation and Upgrade Information Master Guide SAP Gateway Master Guide : Deployment Options and Embedded Versus Hub Deployment.
For SAP NetWeaver 7.4, see SAP Help Portal at http://help.sap.com/nw74 Application Help Function-Oriented View SAP Gateway Foundation (SAP_GWFND) SAP Gateway Foundation Master Guide Deployment Options .

For more information about using multiple network zones, see the following documentation:

For SAP NetWeaver 7.31, see SAP Help Portal at http://help.sap.com/nw731 Security Information Security Guide Network and Communication Security Using Multiple Network Zones .
For SAP NetWeaver 7.4, see SAP Help Portal at http://help.sap.com/nw74 Security Information Security Guide Network and Communication Security Using Multiple Network Zones .