Partner Brief

Zscaler for SAP S/4HANA
Enhance connectivity and user experience, accelerate app
modernization, and secure access to SAP for employees,
supply chains, and third-party users from any device,location, or network.

© 2022 Zscaler, Inc. All rights reserved.

As a leading provider of management software for business processes, SAP solutions are an integral
part of critical infrastructure, Industrial IoT (IIoT) and Operational Technology (OT) environments. In fact,
SAP customers represent 98% of the top 100 most-valued brands in the world. To ensure effective dataprocessing and information flow across organizations, it’s necessary for employees, supply chains, andthird party users to have reliable and secure access to SAP applications. More importantly, as organizations
migrate from on-premise SAP ERP Central Component (SAP ECC) 6.0 to SAP S/4HANA in HEC/PCE
environments and the public cloud, users want a seamless digital experience with little to no change whenaccessing business-critical apps to prevent disruptions to availability, connectivity, and productivity.
Unfortunately, organizations with traditional
networking and security approaches are facedwith access and modernization challenges. In thepast, users primarily accessed business-critical

Benefits of Zscaler for SAP• Deliver a superior SAP user experience:

applications and systems on corporate networks

Boost the productivity of your hybrid

safeguarded by perimeter defenses. However, as

workforce and proactively resolve user

businesses move towards a hybrid work modelexperience issues with ZDX’s continuous

and users are accessing SAP from anywhere,

monitoring and visibility.

on any device, and from any location, the virtual• Reduce operational complexity and costs:

perimeter has expanded beyond the networkWith no hardware or software to manage,

all the way to users, devices, and applications.

ZPA is cloud-delivered and eliminates

Legacy, network-centric access tools such as

infrastructure overhead.

VPNs that route sensitive data over public and• Extend zero trust across apps, workloads,

private networks are ineffective in the cloud andand IoT: Leverage a single global policy

mobile-first world. With frequent downtime andengine to deliver fast, direct access to private

slow application connections, VPNs are often theSAP apps, workloads, and OT/IIoT devices.

culprit of a frustrating user experience. Simplyput, VPNs cause high latency and performance• Secure remote user and device access toSAP: Never placing third-party users ordegradation while exposing the network and SAP

supply chain tools on your corporate network

ERP systems to attackers and risks.

reduces risk exposure and lateral movement.
• Mitigate the risk of a data breach: Make
SAP applications invisible to unauthorizedusers and enforce least-privileged access,minimizing the application attack surface ofSAP S/4HANA.

© 2022 Zscaler, Inc. All rights reserved.

Partner Brief2

Zscaler for SAP: Zero trust for security
and beyond
The Zscaler Zero Trust Exchange™ is built on azero trust architecture and offers a platform ofservices that enable fast, secure connections toSAP, allowing employees and third-party users
to work from anywhere using the internet as thecorporate network. The platform determines trust
based on user identity and context–including
location, device, application, and content–toestablish connections. Powered entirely byrenewable energy, each of the 150+ global

Zscaler Private Access (ZPA) applies the principlesof least-privileged access to give users secure,direct connectivity to private applications running
on-prem or in the public cloud while eliminating
unauthorized access and lateral movement. As
the world’s most deployed zero trust network
access (ZTNA) platform, ZPA can be deployedwithin hours and provides remote access fromany device, location, and network. In fact, Gartner
states that by 2025, at least 70% of new remote
access deployments will be served predominantly
by ZTNA.

points of presence is peered with the world’s

Additionally, Zscaler Digital Experience (ZDX),

largest cloud providers so that users and supply

an integrated service on top of the Zscaler Zerochain tools experience the shortest user-to-app

Trust Exchange, continuously monitors digitalpath for SAP S/4HANA connections without

infrastructure to ensure business productivity andsacrificing security.

IT agility. IT teams gain visibility and insights toanalyze, troubleshoot, and resolve performanceand user experience issues.

Secure SAP Cloud Migration and App
Modernization“With ZPA for SAP,
we’re getting a better
security footprint,
better visibility, andwe’re more compliant.
We can enable ourusers to work fromanywhere—a win
all around.”Take advantage of SAP S/4HANA to benefit
from improved performance, reduced operational
complexity, and lower costs. With 95% of new
digital workloads to be deployed natively in thecloud by 2025, as Gartner estimates, it’s essential
to ensure your business migrates with peaceof mind, and your application infrastructure is
optimized for agility and scale.

Eric Fisher
Director of IT at Growmark© 2022 Zscaler, Inc. All rights reserved.

Partner Brief3

Deploying SAP with Zscaler’s inline security cloud removes complex networks, enabling better visibility
and easier, more secure migration from on-premises SAP ERP workloads to SAP S/4HANA in HEC/PCE
environments and the public cloud.

SAP ERP
Data Center

SAP S/4HANAAWS/AzureAC

Zero Trust
Exchange

SAP ERP
Data Center
ACAC

SAP S/4HANAAC

AWS/Azure

Zero Trust
Exchange

INSIDE SAP S/4HANA

1. User authenticate to IdP
2. Authenticated user
requests accessto an app
ID Provider

ACLOADBALANCER
3. Policies determine if the user
has access to the app
4. If allowed, the cloud establishes
outbound-only connection:from Client Connector to Service
Edge from App Connector tosame Service Edge

NicoleZscaler Client Connector
installed on user devices.

ACSAP APPAPPSERVER CONNECTORS(Each supportsup to 500 mbps)

NicoleZscaler Client Connector
installed on user devices.

Network Configuration is detailed in theSAP Network Configuration Gudie.

Keep the businessrunning

Unify accesspolicySecure cloud
migration

Improve user
experience

Zscaler Private Access™
application connectors arecloud-delivered, deploying
in minutes with nodowntime.

Zscaler doesn’t change user
access, no matter where you
are in your cloud transformation journey—access is
consistent across all locations and devices.

Adaptive zero trust access based on identity andcontext reduces your attack
surface and makes SAP
more agile and scalable.

Granular visibility into accessand control from Zscaler
Digital Experience™ helps
you pinpoint root cause andspeed up MTTR for user
experience issues.

Reliable secure remote access for employees, third party users, and supply chains
Boost the productivity of your hybrid workforce by securely and seamlessly connecting employees andthird-party users to the SAP applications they need most. Ensure IIoT and OT environments remain atpeak performance and supply chains are efficient and uninterrupted for transporting goods, managing
inventory, warehouse operations, or material availability.
Based on the zero trust principle of least-privileged access, ZPA determines access using context-based
identity and policy enforcement—not an IP address or VPN connection. By eliminating VPN gateways andlegacy appliances that have limited capacity and cause latency and connectivity issues, users and devices
are never put on the network, reducing your attack surface and the risk of lateral movement.

© 2022 Zscaler, Inc. All rights reserved.

Partner Brief

4

Zero Trust
ExchangeAC

PublicCloudSaaS

NicoleData Center

SAP S/4HANA

1

2

Receive finishedproduct warehouse

Pick, pack and ship
product for delivery

3

Receive proofof delivery

Maximize
productivity

Optimize connectivity
anywhere

Protect SAP fromcyberthreats

Maintain regulatorycompliance

Always-on access tobusiness-critical systems
and applications removes
the need to backhaul traffic
through unreliable VPNs.

Connections take theshortest path: remote users
through the closest Zscaler
Public Service Edge, andin-office employees throughan on-prem Private
Service Edge.

Zero trust policies neverplace users or third parties
on your corporate network,and applications are never
exposed to the internet,
making them invisible tounauthorized users.

Zero trust network accessbased on identity and context, without costly infrastructure and VPNs, adheres
to emerging complianceregulations such as NIST
800-207.

For more information on Zscaler solutions for SAP,
please visit Zscaler for SAP.
Ready to modernize SAP access and achieve application modernization with Zscaler?
Check out Zscaler in the SAP Store or set up some time to meet with us.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient,and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SASE-based Zero Trust Exchange is the world’s largest inline cloud security platform. Learn
more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2022 Zscaler, Inc. All rights reserved. Zscaler™,
Zero Trust Exchange™, Zscaler Internet Access™,ZIA™, Zscaler Private Access™, and ZPA™ areeither (i) registered trademarks or service marksor (ii) trademarks or service marks of Zscaler,Inc. in the United States and/or other countries.
Any other trademarks are the properties of theirrespective owners.

zscaler.com