Transitioning from SAP Enterprise Threat Detection (ETD) to the Cybersecurity Extension for SAP involves configuring your SAP Solution Manager platform. This process requires completing the Managed System Configuration for each target system using transaction SOLMANSETUP, while omitting specific, non-essential automatic and manual activities to ensure a smooth transition.
Executive Summary
The Cybersecurity Extension for SAP, developed by Layer Seven Security, serves as an alternative to SAP Enterprise Threat Detection (ETD) for vulnerability management, threat detection, and custom code security. Unlike SAP ETD, which functions as a separate tool, the Cybersecurity Extension for SAP is an add-on for SAP Solution Manager. Because over 12,000 SAP customers already use Solution Manager for application lifecycle management, this integration simplifies the transition by utilizing existing infrastructure.
The setup process focuses on configuring target systems within the Solution Manager environment. By following the Managed System Configuration guided procedures, administrators can prepare their systems for the new extension. While most steps in the configuration must be completed, specific activities such as Single Sign-On setup and E2E Trace Upload Service are not required for this transition. Successfully configuring these systems allows organizations to remove legacy SAP ETD consoles, sensors, and users from their landscape, effectively migrating their security operations to the integrated Solution Manager-based platform.
Key Takeaways
- The Cybersecurity Extension for SAP is an add-on for SAP Solution Manager, not a standalone tool like SAP ETD.
- Managed System Configuration is mandatory for each target system via transaction SOLMAN_SETUP.
- Specific configuration activities, such as E2E Trace Upload Service, are unnecessary for this transition.
- Usage rights for SAP Solution Manager are typically included in standard SAP support.
Comparison of SAP ETD and the Cybersecurity Extension for SAP
The following table compares the platform and integration requirements of the two security solutions.
| Feature | SAP ETD | Cybersecurity Extension for SAP |
| Platform Type | Standalone Tool | SAP Solution Manager Add-on |
| Integration | Separate Landscape | Integrated via Solution Manager |
| Developer | SAP | Layer Seven Security |
How do you complete Managed System Configuration for the extension?
Managed System Configuration must be completed for each target system to implement the Cybersecurity Extension for SAP. To begin, execute transaction SOLMAN_SETUP or navigate to the work center labeled SAP Solution Manager Configuration – Configuration (All Scenarios). Select Managed System Configuration within the Cross Scenario Configuration menu. Highlight your relevant system in the Technical Systems tab and select Configure System – Full Configuration. Ensure the status of all steps is green (completed); if any steps are red or yellow, follow the provided guided procedures to resolve them.
Which configuration steps can be skipped?
During the Finalize Configuration stage of the Managed System Configuration, several automatic and manual activities are not required for the Cybersecurity Extension for SAP. You do not need to perform the following:
- Setup Single Sign-On
- Activate E2E Trace Upload Service
- Introscope Host Adaptor
- Apply Settings for EWA Monitoring
- Byte Code Adaptor Installation (Java Systems)
- Enable Remote R/3 Connection
Note that the status of the steps Maintain Users, Finalize Configuration, and Check Configuration can remain yellow.
Frequently Asked Questions
Is the Cybersecurity Extension for SAP a standalone tool?
No, it is an add-on for SAP Solution Manager. Unlike SAP ETD, which is a separate tool, this extension leverages the application lifecycle management capabilities of Solution Manager, which is already widely used by SAP customers.
How do I access the configuration for the extension?
You can access the configuration by executing transaction SOLMAN_SETUP or by navigating to the SAP Solution Manager Configuration work center. From there, you will proceed through the Managed System Configuration for each target system.
Can I remove SAP ETD after transitioning?
Yes. Once you have completed the transition to the Cybersecurity Extension for SAP, you can remove the SAP ETD consoles and sensors from your SAP landscape, as well as any existing SAP ETD users and add-ons.