General SAP discussion

Summary:

This document outlines a discussion between Vasant Kumar, Damian Skeeles, and Anil Dhoot regarding concerns over security issues related to enabling SMB access for collecting logs from SAP using SmartConnector by HP Enterprise Security Products at a large petroleum company in India. Vasant seeks advice on alternative methods of log collection and examples of ArcSight deployments integrated with SAP for guidance. The email exchange suggests exploring options such as BAPI integration, engaging Curt Lockton for potential deeper engagement, and considering agileSI's SAP integration solution which can produce more events than found in audit logs.

Details:

Vasant Kumar is a Lead Solution Architect at HP Enterprise Security Products and is working on integrating SAP for a large petroleum company in India. The customer has concerns about the way logs are collected from SAP using their SmartConnector due to security issues regarding enabling SMB access to specific log folders on the SAP server. Vasant seeks advice or references on alternative methods of collecting logs, as well as examples of ArcSight deployments integrated with SAP. The email exchange between Vasant Kumar, Damian Skeeles, and Anil Dhoot discusses SAP integration concerns for a large petroleum company in India. Vasant mentions that the customer has security concerns about enabling SMB access to shared folders for log collection from SAP servers. He also asks if there are any reference deployments of ArcSight integrated with SAP for guidance on alternative methods to collect logs without sharing folders. Damian Skeeles suggests exploring options for BAPI integration and engaging Curt Lockton for potential deeper engagement at a higher budget, though he acknowledges the previous in-depth engagement was with Deloitte and is unsure of the current relationship and product status. A datasheet for agileSI's SAP integration solution is attached, highlighting its extensive ESM content and ability to produce more events than what can be found in the audit log.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.