Url Filtering for SAP PI Web Service

[Former Member]

Dear All,

Is there any mechanism to protect my SAP PI web service fo eg. (http://<hostname>:<port>/XISOAPAdapter/MessageServlet?chanell ........)

So i can set security level, only certain ip address can acces the URL, certain ip adress can only acess to certain URL that define.

I've read about URL FIltering using SAP Webdispatcher, but I confuse how to implement this filtering especially define the permission table.

Regards

Hadi Prabowo

[Former Member]

Thanks for your reply.

In the system we've used the user authorization to acess the web service, but for the more secure connection we are planning to restrict the connection by ip adress and URL.

With our internet firewall we can restrict by ip adress but there is limitation in the firewall to restrict by URL because port number that we are using is not standart, in my system we are using port 8163 ( http://<dmz hostname>:8163 ).

So I think URL Filtering is another way to restrict connection by URL, but I have a problem to define permission table.

Regards,

Hadi Prabowo

[former_member209575]

Hi,

You can also consider "Assigned users" in sender agreement. This will allow only restricted users to send the request.

Regards

Pradeep P N

[former_member200962]

Is there any mechanism to protect my SAP PI web service fo eg. 
(http://<hostname>:<port>/XISOAPAdapter/MessageServlet?chanell ........)

By default SAP XI/ PI does not allow unauthorized access, to access any of its services you have to mention a valid user-id and password. Now if you are looking for making a more secure connection then you can try to configure SSL for the webservice.