Skip to content

Commit

Permalink
Update sap_checklist.en.json
Browse files Browse the repository at this point in the history
  • Loading branch information
erjosito authored Jan 17, 2024
1 parent a9abf1e commit 9700338
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions checklists/sap_checklist.en.json
Original file line number Diff line number Diff line change
Expand Up @@ -216,7 +216,7 @@
"subcategory": "Disaster recovery",
"text": "Test the backup and recovery times to verify that they meet your RTO requirements for restoring all systems simultaneously after a disaster.",
"guid": "c4b8e117-930b-4dbd-ae50-7bc5faf6f91a",
"severity": "Medium",
"severity": "Medium"
},
{
"category": "Business Continuity and Disaster Recovery",
Expand Down Expand Up @@ -366,15 +366,15 @@
{
"category": "Identity and Access",
"subcategory": "Identity",
"text": "For SSO for SAP GUI and web browser access, implement SNC \u2013 Kerberos/SPNEGO (simple and protected GSSAPI negotiation mechanism) due to its ease of configuration and maintenance. For SSO with X.509 client certificates, consider the SAP Secure Login Server, which is a component of the SAP SSO solution.",
"text": "For SSO for SAP GUI and web browser access, implement SNC / Kerberos/SPNEGO (simple and protected GSSAPI negotiation mechanism) due to its ease of configuration and maintenance. For SSO with X.509 client certificates, consider the SAP Secure Login Server, which is a component of the SAP SSO solution.",
"guid": "23181aa4-1742-4694-9ff8-ae7d7d474317",
"severity": "Medium",
"training": "https://learn.microsoft.com/training/modules/explore-identity-services/9-exercise-integrate-active-directory-sap-single-sign-on"
},
{
"category": "Identity and Access",
"subcategory": "Identity",
"text": "For SSO for SAP GUI and web browser access, implement SNC \u2013 Kerberos/SPNEGO (simple and protected GSSAPI negotiation mechanism) due to its ease of configuration and maintenance. For SSO with X.509 client certificates, consider the SAP Secure Login Server, which is a component of the SAP SSO solution.",
"text": "For SSO for SAP GUI and web browser access, implement SNC / Kerberos/SPNEGO (simple and protected GSSAPI negotiation mechanism) due to its ease of configuration and maintenance. For SSO with X.509 client certificates, consider the SAP Secure Login Server, which is a component of the SAP SSO solution.",
"guid": "6c8bcbf4-5bbe-4609-b8a0-3e97778424d6",
"severity": "Medium",
"link": "https://blogs.sap.com/2017/07/12/sap-single-sign-on-protect-your-sap-landscape-with-x.509-certificates/"
Expand Down Expand Up @@ -959,7 +959,7 @@
{
"category": "Network Topology and Connectivity",
"subcategory": "Segmentation",
"text": "For SAP RISE/ECS deployments, virtual peering is the preferred way to establish connectivity with customer\u2019s existing Azure environment. Both the SAP vnet and customer vnet(s) are protected with network security groups (NSG), enabling communication on SAP and database ports through the vnet peering",
"text": "For SAP RISE/ECS deployments, virtual peering is the preferred way to establish connectivity with customer's existing Azure environment. Both the SAP vnet and customer vnet(s) are protected with network security groups (NSG), enabling communication on SAP and database ports through the vnet peering",
"guid": "87585797-5551-4d53-bb7d-a94ee415734d",
"severity": "Medium",
"link": "https://learn.microsoft.com/azure/sap/workloads/rise-integration"
Expand Down Expand Up @@ -1002,7 +1002,7 @@
{
"category": "Security, Governance and Compliance",
"subcategory": "Secrets",
"text": "Encrypting SAP HANA database servers on Azrue uses SAP HANA native encryption technology. Additionally, if you are using SQL Server on Azure, use Transparent Data Encryption (TDE) to protect your data and log files and ensure that your backups are also encrypted.",
"text": "Encrypting SAP HANA database servers on Azure uses SAP HANA native encryption technology. Additionally, if you are using SQL Server on Azure, use Transparent Data Encryption (TDE) to protect your data and log files and ensure that your backups are also encrypted.",
"guid": "cf65de8e-1309-4ccc-b579-266bcca275fa",
"severity": "High",
"training": "https://learn.microsoft.com/azure/cloud-adoption-framework/scenarios/sap/sap-lza-database-security",
Expand Down

0 comments on commit 9700338

Please sign in to comment.