Comments for DaFRK – Online Brainware for IT Professionals https://dafrk-blog.com Professional IT, Wonderful Hobbies Tue, 04 Dec 2018 13:56:15 +0000 hourly 1 https://wordpress.org/?v=5.8 Comment on SAP HANA smart data integration and other HANA provisioning tools at a glance by DaFRK https://dafrk-blog.com/en/sap-hana-smart-data-integration/#comment-741 Tue, 04 Dec 2018 13:56:15 +0000 http://dafrk-blog.com/?p=4778#comment-741 In reply to Al.

Hi,

from a performance perspective, you should deploy the data provisioning agent as close to the HANA database as possible, meaning in the same network segment. But for security reasons, the moment you are reaching out to data sources located on the web / in the cloud, you should separate the network segments of the data provisioning agent and the SAP HANA database by a firewall and put the agent in the inner DMZ. This is to ensure a defensive layer between the exposed provisioning agent and your HANA database with lots of sensitive data in it.

Also make sure to separate the network segments for frontend access to the SAP HANA database (HTTPS port) and the backend communication between HANA and the other data provisioning tools (SAP HANA instance port).

]]> Comment on SAP HANA smart data integration and other HANA provisioning tools at a glance by Al https://dafrk-blog.com/en/sap-hana-smart-data-integration/#comment-740 Tue, 04 Dec 2018 13:38:39 +0000 http://dafrk-blog.com/?p=4778#comment-740 Hi, thank you for this excellent post. I have a question, when connecting source data from an on premise databases (e.g. Oracle) to SAP HANA hosted in the SAP Cloud Platform. Should the SAP Data provisioning Agent be deployed in the DMZ of the on-premise network instead of deploying in a separate host in the internal network zone, where the database is located? ]]>