Message Server Access Control List

[SAPSupport]

Hi Team,

As per the As per the EWA reports : Message Server Access Control List section showing in RED.
Where HOST=* is maintained in SAP applications servers. The parameter ms/acl_info having the  HOST=* is maintained all the SAP servers.

As given in the SAP note: 821875 - Security settings in the message server 

The parameter ms/acl_info, must contain all machine names, domains, IP addresses and/or subnet masks for the application servers that are allowed to log on to the message server. You can either list the names or enter each name in a separate line.

This means this file should list the IPs or hostnames of all the application servers of the same SID or if any Internal and external systems which are connecting to our SAP system we need to maintained all the host and IP we need to updated here ?

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Hello,

besides the mentioned SAP Note 821875, see SAP Online Help  Security Settings for the SAP Message Server :
"If this file exists, it must include all host names, domains, IP addresses and/or subnetwork masks from which application servers are allowed to log on to the message server."
Here you can find some examples to help you with the configuration

Kind regards
SAP Technical Support