SAP Basis

ADM100 Lesson: Security in the SAP Environment
SAProuter
Figure 193: SAProuter
See SAP Note 30289.
The firewall system should control access to servers. It is also possible to
permit only certain protocols. Ideally, the firewall allows access only to
the SAProuter. This SAProuter allows, in turn, access only to the message
server or dispatcher, that is, to a certain port of the SAP server.
Modern firewalls can also implement this. Nevertheless, in some cases
(such as for SAPNet - R/3 Frontend access), it is necessary to use a
SAProuter as minimum protection.
SAProuter is an SAP program for forwarding SAP system connections
through firewalls. The SAProuter extends the firewall, but does not replace
it. We recommend that you use SAProuter together with a firewall.
Caution: Without other security measures (firewall), a SAProuter
does not protect your SAP system network.
Hint: You must use a SAProuter for the SAP Remote Services
(SAPNet - R/3 Frontend).
You can also use SAProuter to
2003/Q3 © 2003 SAP AG. All rights reserved. 597