What should you include in the design?

You plan to migrate an SAP environment to Azure.

You need to create a design to facilitate end-user access to SAP applications over the Internet, while restricting user access to the virtual machines of the SAP application servers.

What should you include in the design?
A . Configure a public IP address for each SAP application server
B . Deploy an internal Azure Standard Load Balancer for incoming connections
C . Use an SAP Web Dispatcher to route all incoming connections
D . Configure point-to-site VPN connections for each user

View Answer

Answer: C

Explanation:

✑ A public internet user can reach the SAP Web-Dispatcher over port 443

✑ The SAP Web-Dispatcher can reach the SAP Application server over port 443

✑ The App Subnet accepts traffic on port 443 from 10.0.0.0/24

✑ The SAP Application server sends traffic on port 30015 to the SAP DB server

✑ The DB subnet accepts traffic on port 30015 from 10.0.1.0/24.

✑ Public Internet Access is blocked on both App Subnet and DB Subnet.

Reference: https://azure.microsoft.com/en-in/blog/sap-on-azure-architecture-designing-for-security/