Exposing Portals (including SAP EP and SPS) to the Internet using ISA Server

Recently the CTSC (Collaboration Technology Support Center, a joint team between Microsoft and SAP) has released a so called Collaboration Brief on SAP NetWeaver Integration of Microsoft ISA Server 2004.
The paper descibes how to expose the SAP Enterprise Portal to the Internet including some hints and how to's (https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/3da439fd-0701-0010-1dad-9b2a071799cb).
It is really important to understand the security challenges behind the exposure of backend functionallity (which nearly every business portal - including Sharepoint Technologies - does) to the Web. Microsoft IIS is one of the most used web server platforms so it is worth taking Microsoft ISA server 2004 into consideration for securing an Enterprise solution and separating LANs into firewalled VLANs and run the portal in the DMZ.

This solution fits into Microsofts MSA (Microsoft Systems Architecture), where a discription for the same scenario based on Sharepoint is available already.
https://www.microsoft.com/resources/documentation/msa/idc/all/solution/en-us/default.mspx (MSA)
https://www.microsoft.com/downloads/details.aspx?FamilyID=4c5bf9dd-3efb-451d-b213-98ed039190bf&DisplayLang=en (Sharepoint and ISA)

Hope that helps Architects and Solution designers to accelerate their work.

-Tilo