How to protect your SAP Server ?

[carlos_zhang3]

Dear all ,

i have one question about the seucirty of the sap server .

we are using vlan to separte the end-user & sap server . if the enduser want to access the sap server his must throught a firewall . but the end-user & sap server both are in the same network ( i mean they are using 192.168.1.x / 24 this network address ) . therefore i think this solution is not good for seuciry , right ? could you also tell your suggestion ?

(192.168.1.10~192.168.1.99)enduser <-> <b>firewall</b> <-> sap server (192.168.1.100 ~ 192.168.1.110)

note : this firewall is only used <b>DNAT</b> to connected the vlan , not include any other setting .

Thanks in advanced,

Best Regards,

Carlos

[markus_doehr2]

Nope - people will be able to access the SAP system without using the firewall.

192.168.1.0/24 is the network and each system in the network can talk to the other system directly without using a router.

If you want to separate you need to use different networks so e. g.

192.168.1.0/24 and 192.168.2.0/24.

Be aware that communication must take place also vice versa, means, the SAP system must be able to connect to the clients also (e. g. frontend printing), if you use DNAT this will fail.

--

Markus