Replace Error page: "Service cannot be reached"

[Christian_Gaert]

Hi,

I don't want details like application server name, etc. to be shown on the error screen "Service cannot be reached" in the web browser, because possible attackers could use this information.

Example: User types in browser (internet):

http://mysapserver/any_not_existing_service

http://mysapserver/abcdefgh

http://mysapserver/  (--> without any service)

What I have already done:

• Transaction SICF, Service default_host: I created a explicit response page (Error Pages-->Not Accessible), but still the standard page is shown.
• Profile parameter is/HTTP/show_detailed_errors: I set the parameter to "false", but still the detailed standard page is shown. It actually works for the error page, that is shown for runtime errors.
• I tried this: Setting Up Your Own Error Pages - Administration - SAP Library

Thanks a lot in advance for any hints and tipps.

Regards

Chris

[hemanth2]

Hi Christian,
 

Hope you are doing good.

What is the version of the SAP server? Also are you using a web dispatcher etc . ?

Please check note  617483 and the below example:

Examples of a Dynamic Error Page - Administration - SAP Library

 

Hope this helps.

_ _ _ _ _ _ _ _ _

Kind Regards,

Hemanth
SAP Active Global Support

_ _ _ _ _ _ _ _ _