SAP AS ABAP Administration · Internet Communication (ICF/ICM/ITS)

A team wants to disable the ICF to "reduce attack surface," and assumes it only matters for inbound web traffic. What two things are they getting wrong?

Answer locked. Get the free KnowCard app to reveal it — plus spaced-repetition review so it actually sticks.

This is one card from the KnowCard library — thousands more across SAP, Linux, Python and more. In the app you get the answer, AI explanations, and cards that come back right before you would forget them. Free to start on iOS, Android or the web.

More in Internet Communication (ICF/ICM/ITS)

For convenience you set up the ICM web administration over plain HTTP on an internal network. Why is that a real exposure, not just a formality?

When a classic ABAP screen (dynpro) is displayed to a user in a browser via SAP GUI for HTML, what component performs that conversion?

Inside the ICM, which thread actually accepts an incoming TCP/IP connection, and which one does the request/response work — and why does mixing them up misread a saturated ICM?

You want the ICM to actually start with an instance. Which profile parameter governs that, and which one is NOT the on/off switch even though it also names the ICM?

You need the exact server name and port for the /sap/bc/ping URL and don't want to guess 8000. Where does SICF hand you the right values per protocol?

The integrated ITS keeps exactly one HTML template cache shared by all work processes. Why does that design force the use of mutex locks?

Start learning today

Free to start — download the app or use it in your browser.