SAP RISE Secure Networking: 1-day Implementation

delaware

Implementing best practices on a Connectivity HUB in Microsoft Azure for SAP RISE, private edition

SAP offers connectivity towards SAP RISE within Microsoft Azure

The efficient communication flows design in Microsoft Azure improves the management of critical systems, in addition, being SAP a fundamental element for the business, it is important to identify and implement points of improvement in the current environments of the organization to guarantee a high-security posture.

Goal:

  • Standardize communication between SAP and the Internet
  • Correct use of network security groups (NSG)
  • Control any communication flow between SAP in Azure and on-premises environments by routing everything through the Firewall.
  • Efficiently control traffic within on-premises facilities such as in Microsoft Azure
  • Communication within the SAP virtual network evaluating type of workload and environment to which it belongs
  • Communication within the same region or between other regions is routed through the Azure firewall.

Day 1: deploy roll out + templates:

  • Deploy connectivity hub-spoke
  • Create VNet peering to SAP RISE
  • Create VPN / ExpressRoute connectivity towards on-premise sites (2 sites included in the offer. Extra sites can be added optionally. Costs to be evaluated)
  • MSP portal services
  • Deploy extra VPN Tunnels
  • Add extra NSG rules
https://store-images.s-microsoft.com/image/apps.63784.ee6b5854-7427-4e68-b37a-9aef4ec100ea.11cfa6d2-fd09-425c-af0d-11472780f12a.b9500e74-ac28-42db-bd9f-e7006127534d
https://store-images.s-microsoft.com/image/apps.63784.ee6b5854-7427-4e68-b37a-9aef4ec100ea.11cfa6d2-fd09-425c-af0d-11472780f12a.b9500e74-ac28-42db-bd9f-e7006127534d
https://store-images.s-microsoft.com/image/apps.10637.ee6b5854-7427-4e68-b37a-9aef4ec100ea.11cfa6d2-fd09-425c-af0d-11472780f12a.581a312d-37c6-42ee-b996-73a712c1741a
https://store-images.s-microsoft.com/image/apps.26478.ee6b5854-7427-4e68-b37a-9aef4ec100ea.11cfa6d2-fd09-425c-af0d-11472780f12a.01b2b5d3-e82d-47b3-ba5b-e7b0021d2937