Depending on your environment, devices typically connect to a Relay Server that is deployed to the DMZ (recommended). Alternatively, you can use a third reverse proxy or load balancers. However, in most SAP Mobile Platform deployments, a Relay Server is the first line of defense to the platform, acting as a proxy for the device, and facilitating interactions with SAP Mobile Platforms installed on the corporate LAN.
For Relay Server, configure the Web server host (IIS or Apache) to use a secure port, and use SAP Control Center to configure Relay Server to use secure protocols, ports, and certificates in SAP Control Center.
On the client (in the case of mutual authentication), install certificates, and configure profiles to connect to Relay Server.