SAP NetWeaver - Communication Security

---

Secure Network Communications (SNC) integrates SAP NetWeaver Single Sign-On or an external security product with SAP systems. With SNC, you strengthen security by using additional security functions provided by a security product that is not directly available with SAP systems.

SNC protects the data communication paths between the various client and the server components of the SAP system that use the SAP protocols, Remote Function Call (RFC) or Dynamic Information and Action Gateway (DIAG).

There are well-known cryptographic algorithms that have been implemented by the various security products, and with SNC, you can apply these algorithms to your data for increased protection.

Important Features

SNC secures the data communication paths between the various SAP system client and server components. There are well-known cryptographic algorithms that have been implemented by security products supported, and with SNC you can apply these algorithms to your data for increased protection.

With SNC, you receive application-level, end-to-end security. All communication that takes place between two SNC-protected components is secured.

Additional security features like Smart Cards can be used that SAP does not directly provide. You can change the security product at any time without affecting the SAP business applications.

Levels of Protection

You can apply three levels of security protection. They are −

• Authentication only
• Integrity protection
• Privacy protection

Authentication Only

When using authentication only, the system verifies the identity of the communication partners. This is the minimum protection level offered by SNC.

Integrity Protection

When using integrity protection, the system detects any changes or manipulation of the data, which may have occurred between the two ends of a communication.

Privacy Protection

When using privacy protection, the system encrypts the messages being transferred to make eavesdropping useless. Privacy protection also includes integrity protection of the data. This is the maximum level of protection provided by SNC.