How to secure B2B communication for SAP PI/PO in the DMZ?
B2B setup for SAP PI/PO with DMZ
You want to communicate with your B2B partners, on your SAP PI/PO system. How do we make it secure?
You will need to expose part of your SAP PI system globally via HTTP(S). You need to have some sort of a filtering mechanism os your partners cannot make a lot of changes to your SAP PI/PO system.
So it does make sense to have a filtering either the web dispatcher or better a real HTTP firewall that can filter data correctly.
For outbound communication, you can use a proxy, but it will give some extra maintenance. The benefit is if somebody hacked your system, they could not access their server to upload data.
If you have your questions be sure to signup at
https://figaf.com/qa