topic Re: IDoc data transfer is secure or not in Application Development and Automation Discussions

IDoc data transfer is secure or not

Former Member — Thu, 14 May 2009 12:14:51 GMT

Hi,

I am working on SAP 470 620 system. For one of the interfaces we are sending daily IDocs from our server to an external server.

The Business is in process to confirm if all the data sent from the server is in secured mode or not. For example they are checking if the files are transferred in sFTP mode and not in FTP. They also want a confirmation that the data exchanged between the systems using IDocs is secured or not.

Does any one has any update if it is secure transfer.

Your valuable inputs are highly appreciated. Thanks in anticipation.

Thanks and Regards,

Rahul

Re: IDoc data transfer is secure or not

Former Member — Thu, 14 May 2009 12:19:25 GMT

As far as the systems are in the Secure environment (Company intranet) it should be fine. If the systems are exposed to outside world(internet) somehow then its risky and should be handled by infrastrucutre team.

Again it depends what type of RFC Connection you are doing in SM59.

Hope this helps!

Regards

Shital

Re: IDoc data transfer is secure or not

Former Member — Thu, 14 May 2009 12:25:00 GMT

Hi Rahul,

the data can be transfered to external sytem using interfaces..

1. RFC

2. BAPI

3.IDOC

the data can be transfered to external sytem using above three methods.

as per security the idoc is preferred.

Regards,

Prabhu

Re: IDoc data transfer is secure or not

Former Member — Thu, 14 May 2009 13:09:26 GMT

Hi,

Using IDOCs, we would use tRFC connections, maybe look at ALE user authorizations.

The standard idoc program to send out the IDOCs to ECC, the job that does this- can be checked for users allowed to run it.

Regards,

Venkat

Re: IDoc data transfer is secure or not

Former Member — Thu, 14 May 2009 14:00:01 GMT

You need to provide more information to get an answer. You send an idocs to port, which point RFC destination (SM59 t-code). There you can point another SAP system, XI, Business Connector, third party tools etc. It depends how the data is transferred later, if it goes via XML files via https / ftps protocol or not..

Then it will be possible to verify whether you send the idocs in secure mode or not.

Re: IDoc data transfer is secure or not

Former Member — Fri, 15 May 2009 04:10:38 GMT

Hi,

The RFC destination maintained in SM59 is a R/3 connection (tRFC). The IDocs are sent directly to the XI system. The question I have is the data sent via tRFC port in IDoc format is secured or not.

Waiting for your valuable inputs.

Thanks,

Rahul

Re: IDoc data transfer is secure or not

Former Member — Thu, 07 Jan 2010 14:02:33 GMT

You can secure the tRFC connections with SNC or platform specific solutions (like VPN). If you do not use any of those the RFC connection is not encrypted and only password protected.

Re: IDoc data transfer is secure or not

Former Member — Thu, 07 Jan 2010 18:55:53 GMT

Hello,

In SM59 check the "Logon and Security" tab and search for the SNC field.

Check the online help for SNC enabling (system parameters, certificates, ...).

[http://help.sap.com/saphelp_NW70EHP1/helpdata/en/72/e52c4057cb185de10000000a1550b0/content.htm|http://help.sap.com/saphelp_NW70EHP1/helpdata/en/72/e52c4057cb185de10000000a1550b0/content.htm]

[http://help.sap.com/saphelp_NW70EHP1/helpdata/en/13/4a3ad42ae78e4ca256861e078b4160/frameset.htm|http://help.sap.com/saphelp_NW70EHP1/helpdata/en/13/4a3ad42ae78e4ca256861e078b4160/frameset.htm]

Wim