Suggestion on exposing ECC 6 Prod WebGUI for external vendors!

[Former Member]

Hi,

Our requirement is provide access to few transactions of our Production ECC 6 (EhP4) to external vendors and currently there are no Portal business package for these transactions. Re-development of these transactions could take a long time because of the complexity involved.

What I would like to know is what is the general practice and recommended approach in such scenarios:

- Provide access to these transactions directly via ITS (WebGUI) using HTTPS protocol then by removing all toolbars and strict authorization roles assignment for the external users then secure it via Reverse Proxy using any Web Dispatcher?

- Or create Web Applications (using BSP or WD4A) for each transaction and provide access through external portal?

I would really like to know what's the best practice and recommended approach in such scenarios? And is exposing production ITS WebGUI as explained above safe?

Thanks and Regards,

[former_member194364 · Accepted solution]

Using SAP Web Dispatcher as the reverse proxy would be recommended. Can also use End to End SSL or switch the protocol to HTTP from Web Dispatcher to the WAS.

If you want to use the first option of using the WEBGUI

Use the following WIKI as a guide:

[Article - Employ SAP GUI for HTML instead of an Internet service |http://wiki.sdn.sap.com/wiki/display/HOME/Article-EmploySAPGUIforHTMLinsteadofanInternet+service]

You then create individual Z-services for each individual transaction that is required. Limit the interaction of users to the WEBGUI based service with the parameters:

~singletransaction

and

~webgui_simple_toolbar

[Former Member · Accepted solution]

Thanks for your response. Using Web Dispatcher as reverse proxy really secure for Prod SAP Systems?

[cris_hansen · Accepted solution]

Hello Shrinivas,

If you are concerned about Security, then you can review the article "Security in SAP Internet Transaction Server (ITS) Landscapes" availble [here|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/70362efc-d911-2a10-5794-9470fca27a10?quicklink=index&overridelayout=true].

You can also review the article "How To... Configure SAP Web Dispatcher for SSL" available [here|http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/60b1edfb-2a5c-2d10-2294-d1777056c46a&overridelayout=true].

I hope this helps.

Best regards,

Cristiano

[Former Member · Accepted solution]

Thank you Cristiano for two links. Those two helped me clarify my doubts.

[former_member194364 · Accepted solution]

Q:

Thanks for your response. Using Web Dispatcher as reverse proxy really secure for Prod SAP Systems?

A:

Yes it is.

See the links that Cristiano has posted.

[former_member217353 · Accepted solution]

This message was moderated.