You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/sap/deploy-sap-security-content.md
+34-4Lines changed: 34 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -51,14 +51,42 @@ To deploy a Microsoft Sentinel solution for SAP applications from the content hu
51
51
52
52
Make sure that you also review the [prerequisites for deploying Microsoft Sentinel solution for SAP applications](prerequisites-for-deploying-sap-continuous-threat-monitoring.md), especially [Azure prerequisites](prerequisites-for-deploying-sap-continuous-threat-monitoring.md#azure-prerequisites).
53
53
54
-
## Install the solution from the content hub
54
+
:::zone pivot="connection-agentless"
55
+
56
+
## Install the solution
55
57
56
58
Installing the **Microsoft Sentinel Solution for SAP** makes both the data connector agent and the agentless data connector available to you from the Microsoft Sentinel **Configuration > Data connectors** page. The solution also deploys security content, such as the **SAP -Audit Controls** workbook and SAP-related analytics rules.
57
59
58
-
1. Install the solution using one of these methods, based on your connector type:
59
-
- If you're using the SAP agentless data connector (Limited preview), [install the solution via the Azure marketplace](https://portal.azure.com/#create/sentinel4sap.sentinel4sap-previewsentinel4sap) after receiving a notification of onboarding.
60
+
1.[Install the solution via the Azure marketplace](https://portal.azure.com/#create/sentinel4sap.sentinel4sap-previewsentinel4sap) after receiving a notification of onboarding.
61
+
62
+
1. On the **Microsoft Sentinel solution for SAP applications** page, select **Create** to define deployment settings. For example:
63
+
64
+
:::image type="content" source="./media/deploy-sap-security-content/sap-solution.png" alt-text="Screenshot that shows the Microsoft Sentinel solution for SAP applications solution pane." lightbox="./media/deploy-sap-security-content/sap-solution.png":::
65
+
66
+
1. On the default **Basics** tab, scroll down to select where to install the solution. If you're working with [the Microsoft Sentinel solution for SAP applications in multiple workspaces](cross-workspace.md), select **Some of the data is on a different workspace**, and then define your target workspace, your SOC workspace, and SAP workspace. For example:
67
+
68
+
For example:
69
+
70
+
:::image type="content" source="./media/deploy-sap-security-content/sap-multi-workspace.png" alt-text="Screenshot that shows how to configure the Microsoft Sentinel solution for SAP applications to work across multiple workspaces.":::
71
+
72
+
1. Select **Review + create** or **Next** to browse through the solution components. When you're ready, select **Create**
73
+
74
+
The deployment process can take a few minutes. After the deployment is finished, you can view the deployed content in Microsoft Sentinel.
75
+
76
+
> [!TIP]
77
+
> If you want the SAP and SOC data to be kept on the same workspace with no additional access controls, do not select **Some of the data is on a different workspace**. In such cases, for more information, see [SAP and SOC data maintained in the same workspace](cross-workspace.md#sap-and-soc-data-maintained-in-the-same-workspace).
78
+
79
+
For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
80
+
81
+
:::zone-end
60
82
61
-
- If you're using the data connector agent, in the Microsoft Sentinel **Content hub**, search for **SAP** to install the **SAP applications** solution.
83
+
:::zone pivot="connection-agent"
84
+
85
+
## Install the solution
86
+
87
+
Installing the **Microsoft Sentinel Solution for SAP** makes both the data connector agent and the agentless data connector available to you from the Microsoft Sentinel **Configuration > Data connectors** page. The solution also deploys security content, such as the **SAP -Audit Controls** workbook and SAP-related analytics rules.
88
+
89
+
1. In the Microsoft Sentinel **Content hub**, search for **SAP** to install the **SAP applications** solution.
62
90
63
91
1. On the **Microsoft Sentinel solution for SAP applications** page, select **Create** to define deployment settings. For example:
64
92
@@ -79,6 +107,8 @@ Installing the **Microsoft Sentinel Solution for SAP** makes both the data conne
79
107
80
108
For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](../sentinel-solutions-deploy.md).
81
109
110
+
:::zone-end
111
+
82
112
## View deployed content
83
113
84
114
When the deployment is finished, display your new content by browsing again to the Microsoft Sentinel for SAP applications solution from the **Content hub**. Alternatively:
Copy file name to clipboardExpand all lines: articles/sentinel/sap/prerequisites-for-deploying-sap-continuous-threat-monitoring.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -100,7 +100,9 @@ Typically, Azure prerequisites are managed by your **security** teams.
100
100
101
101
## SAP prerequisites for the agentless data connector
102
102
103
-
We recommend that your **SAP BASIS** team verify and ensure SAP system prerequisites. We strongly recommend that any management of your SAP system is carried out by an experienced SAP system administrator.
103
+
We recommend that your **SAP BASIS** team verify and ensure SAP system prerequisites. The SAP BASIS admin should review SAP notes 3390051 and 382318 to ensure that NetWeaver is set up for integration.
104
+
105
+
We strongly recommend that any management of your SAP system is carried out by an experienced SAP system administrator.
0 commit comments