Where should I put NetWeaver Gateway?

[former_member784016]

Hello,

Where should I put NetWeaver Gateway?

Fiori AP Server?

S/4 HANA AP Server?

Dedicated Server?

Other?

#Our system configuration
Internet(like SalesForce) -> Web Dispatcher*1 -> Fiori AP Server*1 -> S/4 HANA AP Server*2

*1: DMZ

*2: MZ

#S/4 HANA On-premise

Thanks,

Sano

[gregorw · Accepted solution]

Hi Sano,

that architecture looks OK. What you might should think about if you really want to have the Web Dispatcher exposed to the Internet. If you already use SAP BTP and the SAP Integration Suite you could use SAP API Management and SAP Cloud Connector to provide Access to 3rd parties.

Best Regards
Gregor

[former_member784016 · Accepted solution]

Hi Gregor,

Thank you for reply.

>that architecture looks OK.

Where should I put NetWeaver Gateway (in case we cannot use BTP)?

-Fiori AP Server?

-S/4 HANA AP Server?

-Fiori AP Server and S/4 HANA AP Server?

-Dedicated Server?

-Other?

>If you already use SAP BTP and the SAP Integration Suite you could use SAP API Management and SAP Cloud Connector to provide Access to 3rd parties.

How is system architecture?

Is the following content correct?

Internet(like SalesForce) -> BTP(SAP API Management)*1 ->SAP Cloud Connector*2 -> NetWeaver Gateway Server(Dedicated)???*2 -> S/4 HANA AP Server*2

*1: SAP Cloud

*2: MZ(S/4 HANA On-premise)

Thanks,

Sano

[gregorw · Accepted solution]

Having a separate SAP Gateway System in the DMZ is the best that you can achieve. You must ensure that the users calling from Gateway to the S/4HANA have as minimal authorisations as possible.

For further details I think you should engage a local SAP Security consultant.

[former_member784016 · Accepted solution]

Hi Gregor,

Is it required to prepare the SAP Gateway for the number of AP servers in the MZ?
4 AP servers(S/4 HANA, BW/4 HANA, MDG, GRC) exist in MZ.
Can we use only one(common) SAP Gatway for the AP servers?

Thanks

Sano

[gregorw · Accepted solution]

I would suggest you read the SAP Fiori Deployment Options and System Landscape Recommendations to get some guidance.