Case Study #017.01

Scenario

A malicious hacker from the external network intends to modify the SAP Router configuration file.

Impact

It is crucial to properly authorize and protect the SAP Router configuration file, saprouttab, to prevent unauthorized modifications. Otherwise, incoming connection requests from the external network may pass unchecked into the internal network, posing a significant security risk.

DefenceMore OCA Capabilities

Defencemore OCA's N001 control checks whether the server is in a DMZ environment. N003 verifies if the configurations within the saprouttab file are correct. N002 ensures that the file has the appropriate access authorization.

Related Checks

• N001 DMZ
• N002 SAPROUTTAB Permission
• N003 SAPROUTTAB File Check