Training Schedule

Have a question? Contact Us

• Essential
• ADM100
• ADM960
• Recommended
• Knowledge of security topics
• Technical background (Web technology, SAP Basis) SAP System Administration

• 1) Operating System
• a) File System Security* Windows/Linux, Access Control, User concept
• b) Starting Applications from SAP
• 2) Database
• a) Database access (SAP, external)
• b) DB hardening
• 3) Network
• a) Firewall, Proxy servers
• b) SAP Web Dispatcher*, SAProuter*
• c) Hacking tools*
• d) Brute Force Attacks*
• e) RFC Gateway Hack*
• 4) SAP
• a) User authentication and access control
• b) Access over the client barrier
• c) Identity Provisioning and Identity Federation with NetWeaver Identity Management
• d) SSO (logon tickets, SAML, SPNego, etc.)
• e) Authorisation*
• f) Switchable authorisation checks
• g) SAP NetWeaver AS Java
• h) SQL-Injection
• i) Automated penetration test*
• j) SAP Gateway Security*
• k) Misuse of RFC callback
• l) Identifying redundant Custom Coding (UPL)
• m) SAP Security Patching - Best Practise and Tools
• n) Communication Interfaces (RFC, http(s))*
• o) Encryption
• p) Security in transportation*
• q) Logging and trace option
• r) SAP Solution Manager, Agents and Wily Introscope Enterprise Manager
• s) Enhanced Security in Solution Manager 7.2
• 5) New products , tools and transactions of SAP security related news:
• a) Enterprise Threat Detection (ETD)
• b) Read Access Logging (RAL)
• c) Unified Connectivity (UCON) - introduction
• d) Authorisation maintenance based on UCON
• e) Defining different security policies for user groups (secpol)
• 6) (*)will be simulated by the participant as attacker and defender with help of the trainer
• Notes
• • AddOn conducts this training in co-operation with SAP Education.