Device-to-Platform Communications

Depending on your environment, devices typically connect to a Relay Server that is deployed to the DMZ (recommended). Alternatively, you can use a third reverse proxy or load balancers. However, in most SAP Mobile Platform deployments, a Relay Server is the first line of defense to the platform, acting as a proxy for the device, and facilitating interactions with SAP Mobile Platforms installed on the corporate LAN.

For Relay Server connections, the traffic content depends on the payload protocol of the application:
- Messaging communication encrypts the entire communication stream with a proprietary protocol and uses both HTTP and HTTPS protocol.
- Replication communication uses either HTTP or HTTPS protocol.
For Relay Server, configure the Web server host (IIS or Apache) to use a secure port, and use SAP Control Center to configure Relay Server to use secure protocols, ports, and certificates in SAP Control Center.

On the client (in the case of mutual authentication), install certificates, and configure profiles to connect to Relay Server.
Reverse proxies or load balancers require you to open firewall holes from the DMZ to SAP Mobile Platform, but the same protocols described for messaging and replication still apply.