Webdispatcher opening firewall ports

[Former Member]

Hello All ,

We are facing a situation that our PI / SAP webservices are not reachable because of our systems being in MZ zones behind our corporate firewall.

I have looked for different options to make them accesable without compromising on security . The best solution i found until now is to use SAP webdispathcer.

But i am not clear on how it works. I get it that it must be installed in DMZ and it is the entry point for all Http communication , I am not sure how it talks to SAP servers in MZ .

Which protocol does it use ?

Are ny port need to be opened in the corporate firewall ( between webdispathcer & SAP servers )

If so which ones?

If the ports are opened , what big value is webdispathcer serving ?

Are there any other solutions for my problem ? (I already know about the AEX option ) .

Would be interested to know about your current topology and its advantages/disadvantages.

Cheers

Venkat

[Former Member]

In the DMZ (outer interface) you will have to open HTTP(S) port(s). Between DMZ and the internal network where the SAP backend systems are you will have to open message server port(s), HTTP message server port(s) and the ports used by the SAP backend applications (AS ABAP, AS JAVA). See the attached links for details.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/48/99ac3a7f020e27e10000000a421937/frameset.htm

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/4e/c26cdc58e968b9e10000000a42189e/frameset.htm

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/a2/f9d7fed2adc340ab462ae159d19509/frameset.htm