How to keep security level after OS or DB would be expired

[Former Member]

Hello Experts,

Our SAP system runs on WIndows2003.

And it is very difficult for us to upgrade OS to WIndows2008.

But Windows2003 patch would not be provided after 2015,

because Windwos2003 maintenance be finished.

Therefore I'm looking for the way how to keep security level somehow...

Unfortunately, until now I don't have no idea!

If someone have same or similar case, please tell me the information.

Jus hint would be usefull for me.

Thank you for advace.

Best Regards.

Toshi

[markus_doehr2 · Accepted solution]

> Our SAP system runs on WIndows2003.

> And it is very difficult for us to upgrade OS to WIndows2008.

Why is that? I mean, you could buy a new cheap server with a Windows 2008 license and do a simple system copy. And you have always the option to change the operating system to another one, e. g .Linux, which will even run on the same hardware.

> But Windows2003 patch would not be provided after 2015,

> because Windwos2003 maintenance be finished.

There may also be other maintenance finished before (database, SAP version etc.) That's how it works in the software world By 2015 the operating system will be 12 years old. 12 years back from now people were working with 16 bit Windows 3.1, as of today there is no more software provided (except for nostalgic reasons).

You could ask Microsoft if they provide additional fixes after 2015 (for money).

Markus

[Former Member · Accepted solution]

Thanks,

But your advice isn't useful for me.

Because the reason why not to upgrade OS isnt' technical , cost issue.

Main point is whole system impact we have .

We have some systems SAP, Non-SAP, Job tool etc.

And due to some reasons, it is difficult to choose OS Upgrade.

Therefore I'm looking for the way we sholud do.

In an extreme case, to negociate MS special contract,

keep away the other network, etc.

BR

[markus_doehr2 · Accepted solution]

> But your advice isn't useful for me.

That's how the world spins... I can't change that

> Because the reason why not to upgrade OS isnt' technical , cost issue.

> Main point is whole system impact we have .

> We have some systems SAP, Non-SAP, Job tool etc.

Even those tools will stop being supported at some point - including the SAP system you run.

If you run a SAP system and you pay annual license fees for SAP then the costs for the OS itself are marginal. Keeping legacy systems alive over the time of the official maintenance is always much more expensive than upgrading to a current version.

> And due to some reasons, it is difficult to choose OS Upgrade.

> Therefore I'm looking for the way we sholud do.

See above. If your server breaks and has a hardware issue you may need to buy a new one because spare parts are no more available or are just too expensive - and a new server won't support an obsolete OS any more (drivers etc:).

> keep away the other network, etc.

Yes, that could be a quite easy solution, simply put a firewall in front of the SAP system and configure it so that no user can map drives or connect to the system but through SAPGUI. A firewall can be downloaded for free - take any Linux distribution from the net.

Markus

[former_member188883 · Accepted solution]

Hi Toshikazu ,

I totally agree with Markus's view point. You should go ahead with latest OS version to have you system supported for a longer duration and have latest security bug fixes installed.

If you can create a business case and present it your team and management, definitely there will be consensus on going for an upgrade of OS and hardware.

Hope this helps.

Regards,

Deepak Kori

[Former Member · Accepted solution]

Thank you for your reply.

Because System can be used just via intranet and can't be accessed any external network,

most dominant solution would be to isolate any other network all in all.

But it might be issues by doing it....

Anyway I'm looking for somehow.

BR,

Toshi