SE91 Message Maintenance
CG3Y Download file
The security of an SAP system requires protection against unauthorised access, e.g. through the secinfo and reginfo files. A cleanly implemented authorisation concept protects against attacks within the SAP system. However, it is also possible to attack your SAP system via the network. Through the RFC Gateway Server, your system communicates with external servers and programmes. One particularly effective way to protect against this are so-called Access Control Lists (ACL). Find out what this is and how you can use it to better protect your SAP system. The SAP Standard offers different approaches for gate protection. All methods combined can provide even greater safety. For example, it is possible to use Access Control Lists (ACL) to monitor exactly which external programmes and which hosts can communicate with the gateway. Another option is to configure the gateway to support Secure Network Communication (SNC). Finally, there are various security parameters for the gateway. This article focuses on the use of ACL files such as secinfo and reginfo files. What is an ACL? Access control lists are files in which permitted or prohibited communication partners can be recorded. For the gateway to use these ACL files, parameters must be set in the default profile of the SAP system and of course the files must be maintained accordingly. With the help of logs and traces, which can be configured for this purpose, a precise investigation can be made in advance of the activation, which connections currently run via the gateway. This allows them to prevent important applications with which your system communicates from being blocked by the ACL files. The rules in the ACL files are read from top to bottom of the gateway to decide whether to allow a communication request. If none of the rules matches the requesting programme, it will be blocked. Network-based ACL The network-based ACL file contains permitted and prohibited subnets or specific clients.
At the same time, there is a need to return the solutions to the SAP standard. A collaborative approach between departments and IT technology is required to assess IT technical and business benefits. It is also necessary to check whether the adaptation of business processes to avoid modifications to the implementation may be more effective and therefore more cost-effective. This must be evaluated and decided jointly. As a result, we recommend defining and implementing business standards for creating and maintaining solutions.
Indirect use of SAP
The Precalculation Server is a standalone application that allows you to generate and distribute Excel workbooks based on SAP BI data. Are you already using the Precalculation Server or would you like to take advantage of it in the future? I would be happy to explain the steps from installing the Precalculation Server to finally starting the instances on the target system so that you can use the Precalculation Server for your purposes. As a reader of our blog, you are certainly interested in tricks and tricks that will make your SAP system easier to handle. You may be familiar with the situation where you want to install a Precalculation Server yourself. Here you will learn how this task can be implemented in the SAP environment. Prerequisites For example, you need a Windows 7 or a Windows Server 2012 instance on which the Precalculation Server is installed to operate the Precalculation Server. Both 32 and 64-bit versions can be used. In addition, the machine requires a .NET installation to run the Precalculation Server in addition to a Microsoft Excel installation (32-bit version is essential). Download the installation files In advance, you should download the latest installation files from the official SAP website to the target computers. Cleanup Phase If you already have an existing installation on the system, the first thing you need to do is uninstall all items to use a clean host for the Precalculation Server. You can do this by calling the Windows Control Panel: The order must be followed according to the SAP documentation. Therefore, apply the following procedure for uninstallation, no installation of SAP should be visible anymore: Order: 1) SAP BW Precalculation Service 2) SAP Business Explorer 3) SAP GUI for Windows XY Note: During the installation and uninstallation of individual components, the progress bar status may be suspended at certain locations. This is not a cause for concern, but a normal behaviour. Often, it will stand at 92% or 95% for about 10 minutes.
In general, SAP operations and all associated activities need to be further professionalised. This includes the documentation of key and mission critical processes and their verification for timeliness and validity. It is also necessary to record and describe the performance of the base by IT service management, as well as techniques such as a RACI matrix to identify and document the responsibilities of the SAP basis.
"Shortcut for SAP Systems" simplifies tasks in the area of the SAP basis and complements missing functions of the standard.
In addition, SAP administrators must of course be particularly well versed in this specialist area and be able to deal confidently with all issues relating to SAP solutions.
Installation and Usage Tips Run the TREX configuration after the basic configuration of the Solution Manager.