Network Security & Protocols

Why is Telnet access to the AS Java restricted to host 127.0.0.1?

How are AS Java standard TCP/IP port numbers laid out across instances and services?

For Internet scenarios, what is an Application Gateway in SAP's DMZ recommendation, and what actually implements it?

Access control and role assignments are configured correctly, so why does SAP still call a secure network infrastructure a prerequisite for data security?

What makes unsecured network traffic between SAP systems dangerous beyond exposing business data?

In a standard SAP landscape, when do you secure a connection with SSL versus with SNC?

Which protocol does the AS Java User Management Engine use to read user data, and what determines it?

P4 is a Java/SAP RMI transfer protocol, so is it secured with SNC the way RFC is?

The Session protocol on AS Java is not encrypted — why isn't that treated as a security gap?

Once SSL is configured on the AS Java, can you assume its database connection is encrypted too?

A web service call already runs over HTTPS, so why does AS Java still implement the OASIS Web Service Security standard on top of it?

How does SAP recommend positioning systems like SAP ECC/CRM and an internet-facing portal in the network topology?