Risk
Unprotected traffic can expose data and allow a connection partner to be impersonated.
ABAPWeb Dispatcher
Settings and priorities
| Technology / priority | Parameter or mechanism | Setting and purpose |
|---|---|---|
| ABAP Standard | snc/enable | 1 Enables SNC. |
| ABAP Standard | snc/data_protection/min ; max ; use | 3 ; 3 ; 3 or 9 Enforces SNC confidentiality. |
| ABAP Critical | system/secure_communication | ON Protects internal communication. |
| ABAP Extended | snc/accept_insecure_gui ; snc/accept_insecure_rfc | U or 0 Controls incoming unencrypted connections. |
| ABAP Extended | snc/only_encrypted_gui ; snc/only_encrypted_rfc | 1 ; 1 Enforces encryption after client preparation. |
| ABAP Extended | snc/log_unencrypted_rfc | 2 Logs unencrypted RFC. |
| ABAP Extended | snc/permit_insecure_start | 0 Disallows insecure startup when SNC is enabled. |
| ABAP Extended | ssl/ciphersuites ; ssl/client_ciphersuites | Select appropriate server and client TLS settings Distinguish server-side from client-side TLS configuration. |
| Web Dispatcher Standard | icm/server_port_<num> | PROT=HTTPS Provides an encrypted service port. |
| Web Dispatcher Standard | icm/HTTP/admin_<num> · PORT | HTTPS port Makes administration available over a protected connection. |
How to verify
- Confirm SNC on both sides of the integration.
- Verify protection levels, certificates and encryption of actual connections.
- Review exceptions before enforcing encrypted-only access.
- Verify TLS for Web Dispatcher administration as well.