Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internet for SAP

Hi All,

We have XG330 with 18.5.3-MR3 and we have SAP server behind it.  Our SAP servers send SMS using HTTP.  To do so SAP recommends using Proxy settings. The Proxy settings require following details to be added:

  1. Server IP (That would be my Firewall's LAN IP)
  2. Port No.  - (This would be 443)
  3. USername & Password - This is the problem area.

How to create Clientless user with Password.

Would Normal User work without client?

Though we tried creating a Proxy Server on a Linux Box and use that but it is creating some issues.

Please help.



This thread was automatically locked due to age.
  • Hello ,

    Clientless users are not required to authenticate using a client to access the internet. Instead, the firewall authenticates these users by matching a user name to an IP address.

    So, your SAP server requires Internet and you need to configure proxy on it right ?
    e.g XX.XX.XX.XX:80  [you mentioned http] 

    But again in the port no you mentioned it 443, so that would be a HTTPS port.

    Is your SAP is running on a windows server or it a Linux base server ?

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • Hello 

    So, your SAP server requires Internet and you need to configure proxy on it right ?
    e.g XX.XX.XX.XX:80  [you mentioned http] 

    Yes to send SMS it does. Port number doesn't matter that can be changed I suppose.

    Is your SAP is running on a windows server or it

    IBM AIX

    Issue is, can't install Client application for Authentication in SAP server. and Client-less user can't be created with Password authentication.

    AS SAP Proxy configuration requires it to be authenticated on Proxy Server with username-password.

  • In that case if you want a clientless authentication then username password wouldn't be possible, as it authenticates with the matching a user name to an IP address.

    And as far as proxy configurations is concerned, found an article for IBM: https://www.ibm.com/docs/en/aix/7.2?topic=server-proxy-services

    Not sure if that would help, but configuring firewall as a proxy with the Firewall IP and the port should be fine on that client server.
    But again your requirement is along with the username & password so that it authenticates, wouldn't be possible with clientless.

    As you would need a web, or CAA client...

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • I thought it the same way, was looking for a second opinion.

    Thanks for support. 

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?