Recommended Settings for SAP Logging and Auditing
Recommended SAP logging settings keep security-relevant events while limiting disk and table space use. Maintain static filters in the Security Audit Log, set HTTP, gateway, Java and HANA logging options, and archive each log area as described. The Cybersecurity Extension for SAP Solution Manager monitors these logs to detect indicators of compromise. Executive Summary The […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Cyber Espionage Warning: 30% Growth in Targeted Attacks
The number of organizations targeted by advanced hacking groups rose by almost one third between 2015 and 2018, according to Symantec’s Internet Security Threat Report. Groups such as Chafer and Dragonfly increasingly use publicly available tools rather than malware, so detection speed and incident response matter. Executive Summary The annual Internet Security Threat Report shows advanced hacking […]
Layer Seven Security Recognized as an SAP Cybersecurity Leader
Layer Seven Security was named the leading SAP cybersecurity provider in the 2018 Top 10 SAP Solution Providers study. The company more than doubled its customer base and grew revenue 350% in 2018, and announced a three-year roadmap covering security reporting, Java monitoring and database monitoring. Executive Summary The 2018 Top 10 SAP Solution Providers study recognizes […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]
Webinar: Security Analytics with SAP Web Intelligence
Layer Seven Security’s webinar on Thursday, December 13, 2018, 11:00 AM to 12:00 PM EST, shows how to visualize security risks in SAP systems using interactive SAP Web Intelligence reports. The reports connect to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts. Executive Summary This one-hour webinar (Thu, Dec 13, […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
Coming Soon: Security Reporting with SAP Web Intelligence
SAP Web Intelligence (WebI) is a self-service reporting platform for analyzing and visualizing SAP data in a web browser. It uses BEx queries to reach security data in Business Warehouse within Solution Manager, so teams can build dynamic reports with embedded dashboards to monitor risks and track remediation. Executive Summary Layer Seven is preparing security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]