## 13.9.3.1.6  Other Security-Relevant Information
## Security Aspects of Data Flow and Processes
The following table describes some typical processes and communication channels, along with appropriate security measures:
| Process                                                                                                                                                                                                                                                                               | Security Measure                                                                                                                                                                                                                                                     |
|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Mobile devices can be connected using HTTP/ITS mobile (it is also possible to use the SAP console). This is done based on the Internet Communication Framework (ICF) service for RFUI.                                                                                                | For more information, see Internet Communication Frame- work Security (ICF) [page 718].                                                                                                                                                                              |
| For certain scenarios, such as connecting automated physi- cal processes (for example, conveyor systems) using SAP Plant Connectivity, remote function calls (RFCs) are used. Depending on the scenario, Idocs may also be used (for example, when warehouse control units are used). | For more information, see the SAP NetWeaver Security Guide.                                                                                                                                                                                                          |
| Extended Warehouse Management (EWM) offers the possi- bility of uploading and downloading data. In many of these transactions it is possible to either choose a local file system (PC) or files on the application server.                                                            | Ensure that only a few people can access these transactions and that access to the application server file system is re- stricted. You should design logical paths and filenames to restrict the access. For more information, see Data Storage Security [page 718]. |
| EWMoffers a collaborative scenario for SAP Dock Appoint- ment Scheduling. This enables appointment planners for carriers to access the system using SAP Gateway or Web Dynpro ABAP technology, for example, from outside the company network.                                         | In this scenario, users outside of the company or firewall may access the system. For such scenarios, special atten- tion must be paid to assigning authorizations to these users, and to the system setup and how the access from outside the company is granted.   |
| EWMoffers a scenario for Warehouse Billing where there is an integration with the SAP Transportation Management (SAP TM) system.                                                                                                                                                      | In this scenario, EWMcanextract billing-relevant information from SAP TMandsend order and settlement information back to SAP TM. The communication is performed using enterprise services or Web services.                                                           |
| EWMFiori apps, for example, for deliveries or returns proc- essing.                                                                                                                                                                                                                   | In this scenario, SAP Fiori accesses EWMusing SAP Gateway. For more information, see SAP Library for SAP Fiori.                                                                                                                                                      |
## Security for Additional Applications
## Geocoding
EWM can, in some cases, make use of third party geocoding applications, for example, PTV eServer. The software could be used, for example, to calculate geographical information for the locations or distances for transportation lanes. To connect to the third party software, this software may require an RFC destination on the EWM side. For more information on geocoding, see SAP Library for SAP S/4HANA at https:/ /help.sap.com/ s4hana . In SAP Library, choose SAP S/4HANA Enterprise Business Applications Supply Chain SCM Basis SCM Basis Master Data Location . For any security issues regarding the third party application, for example, PTV eServer software, see the third party documentation.
## SAP Plant Connectivity for Scale Integration
EWM can, in some cases, integrate an external scale. The software could be used, for example, to calculate the weight of a handling unit. A sample implementation exists for this in the Determination of HU Weight Using Scale ( /SCWM/EX\_WRKC\_UI\_GET\_WEIGHT ) Business Add-In. In this example, the system uses SAP Plant Connectivity to integrate an external scale. This software may require an RFC destination on the EWM side to connect to SAP Plant Connectivity.
For information about SAP Plant Connectivity, see SAP Help Portal at https:/ /help.sap.com/pco .