Internet Communication (ICF/ICM/ITS)

For convenience you set up the ICM web administration over plain HTTP on an internal network. Why is that a real exposure, not just a formality?

When a classic ABAP screen (dynpro) is displayed to a user in a browser via SAP GUI for HTML, what component performs that conversion?

Inside the ICM, which thread actually accepts an incoming TCP/IP connection, and which one does the request/response work — and why does mixing them up misread a saturated ICM?

You want the ICM to actually start with an instance. Which profile parameter governs that, and which one is NOT the on/off switch even though it also names the ICM?

You need the exact server name and port for the /sap/bc/ping URL and don't want to guess 8000. Where does SICF hand you the right values per protocol?

The integrated ITS keeps exactly one HTML template cache shared by all work processes. Why does that design force the use of mutex locks?

A colleague activated the ITS service in SICF but the integrated ITS still won't run. Which profile parameter actually turns the integrated ITS on or off?

In SITSPMON the integrated ITS status reads ITSPE_DISABLED on one system and ITSPE_NOTFOUND on another. What different action does each one point you to?

You change an itsp/* parameter with the Change Parameters button in SITSPMON to fix a live issue. Why might it silently revert, and which parameters can you even change there?

The Memory statistics tab in SITSPMON is empty or showing nothing useful. What precondition is almost always missing?

A stale HTML template keeps serving from the integrated ITS. If you just wait, when does its cache entry expire on its own?

In the SITSPMON Feature List, a feature shows kernel availability (VK) but the integrated ITS refuses to start. How can one feature block startup entirely?

You invalidated the ITS HTML template cache but users still see the old page. What two scope-and-cleanup facts are usually missed?

You renamed a host (or changed a service-to-port mapping) but the ICM keeps connecting to the old address without any restart. What buffer is stale, and how do you clear it?

A cached response is stale on a web scenario. You clear the ITS template cache but nothing changes. What separate ICM-level cache did you overlook?

You open Goto → HTTP Log in SMICM to check a request that just failed, but the newest entries aren't there. Why, and what one action makes them appear?

You changed ICM configuration and want it live without a full restart. What does Administration → ICM → Configuration → Reload actually refresh at runtime?

You do a hard shutdown of the ICM expecting the dispatcher to bring it right back, but it stays down. What setting did you forget?

You added several users to icmauth.txt with icmon so the team can use the ICM web administration, but only some can actually change settings. What determines who gets admin rights?

The ICM web admin URL is http(s)://host:admin_port/sap/admin — but which profile parameters actually define admin_port?

You see HTTP requests timing out but ABAP dialog work processes look healthy. What distinguishes how the ICM runs, and why does that change where you look?

On a Java-only solution with no SAP GUI, you've lost the login to the ICM web admin interface. Where are those credentials, and why can't you fix it the usual ABAP way?

On a system where backend responses are running slow, why does the ICM NOT exhaust its small worker-thread pool — and what would break if it didn't have the watchdog?

You want a quick browser check that the ICM is accepting and forwarding HTTP requests. What's the prerequisite step before the ICF ping URL will work, and what does a failure actually tell you?

On a dual-stack system, the ICM routes each HTTP request to either the ABAP or the J2EE engine via the URL prefix table. Which stack does a matching prefix go to, and what is the default for everything else?

Since Release 6.40 the ITS is integrated. Where do you actually configure and monitor it, and why is there no separate web server to tune?

An HTTP request reaches the ICM and must be handed to an ABAP work process. Why isn't this just another network socket hop, and what is actually used?

A legacy setup still fronts ITS apps with the standalone SAP ITS 6.20 server. On a SAP NetWeaver 7.0+ system, what is the actual constraint?

A team wants to disable the ICF to "reduce attack surface," and assumes it only matters for inbound web traffic. What two things are they getting wrong?

In SMICM you need to restart the ICM on a busy system. When do you use the soft shutdown vs the hard one, and what's the cost of grabbing the wrong one?