Other Security Solutions

If you want to save cost and your SAP system on the cloud is lightweight, you can use the public network to carry all your services and O&M channel instead of VPN or Direct Connect. For more information, see Figure 1.

Figure 1 Special scenario security solution

This solution has the following characteristics:

• There is only one management zone instead of two management zones (PRD and DEV management zones). Only one bastion host is deployed.
• If it is unnecessary to open service ports and the O&M channel to the entire network, you need to tighten ACL rules on the service ports and O&M channel to strictly control access from source IP addresses.