Boost Your SAP Solution Manager Security with SOS Reports

  • by Tony de Thomasis, SAP Mentor, Solution Manager Practice Lead — Acclimation
  • March 29, 2012
Learn how to generate the Security Optimization Service (SOS) report in SAP Solution Manager 7.1. Discover the level of security in your SAP landscape and learn proactive actions you can take in your system to improve its security.
Key Concept
The SAP Security Optimization Service (SOS) report scans selected SAP systems for critical security settings. To determine the actual risk, all perceived vulnerabilities are ranked using SAP best practices based on severity and probability. The SOS report contains all identified vulnerabilities of the analyzed SAP system landscape together with prioritized recommendations to eliminate or reduce identified vulnerabilities.

The SAP Security Optimization Service (SOS) is designed to help companies analyze and improve the security level of the SAP landscape. Several security checks now form part of a well-maintained SAP EarlyWatch Alert (EWA) report. The introduction of the SOS report can help verify and improve the security of the SAP systems by building on the critical authorization security checks that the EWA identifies. The SOS report also automatically generates proactive improvement recommendations to avoid potential security risks.

Maintaining a vigilant approach to potential security breaches is necessary to achieve the following benefits:

  • Reduce the risk of system intrusion
  • Protect critical business confidentiality
  • Maintain SAP and operating system user authenticity
  • Reduce potential downtime errors caused by the wrong staff having unmetered access to business data
  • Help determine who is logging on to the production system

SOS reports perform the following security checks:

  • Password authentication
  • Basis administration security
  • Change management security
  • User authorization
  • SAP NetWeaver application server
  • SAP router
  • Customer-specific authorization
  • Human resources

The SOS report is one of several guided self-services delivered with SAP Solution Manager 7.1. These guided self-services can help Enterprise Support companies improve several common problem areas such as system performance, data volume management, change management, and business process.

I start by showing you the recommended landscape for using these reports, and then describe a few prerequisites. Finally, I take you step by step through how to set up and use SOS reports in your SAP Solution Manager system.

Tony de Thomasis

Tony de Thomasis has been working with SAP software since 1986. He installed the first SAP R/2 system in Australia for Mobil Oil in 1989. Tony has several years of Basis experience with large companies including National Australia Bank, Telstra, Coles Myer, BHP Billiton, and Australia Post. Tony enjoys SAP NetWeaver system and landscape design, extracting the best out of the database, operating system, disk subsystem, and server platform. He is very keen to virtualize, consolidate, and reduce downtime. Most recently, as an SAP Mentor Tony has taken on an application life cycle management thought leadership role in the SAP community. In his role as NetWeaver Practice Lead for Acclimation, Tony is passionate about deploying SAP Solution Manager as an initiative to reduce support costs, introduce proactive and innovative capability, and manage change. Follow him on Twitter at

See more by this author


No comments have been submitted on this article. 

Please log in to post a comment.

To learn more about subscription access to premium content, click here.