TCP/IP Ports of All SAP Products

Use this information for planning and configuring your network infrastructure according to SAP requirements. You can also use this information to identify specific SAP network traffic for monitoring, prioritization, or security purposes.

Product Name Range
Product Name Port Name Service in etc/services Default Range Rule External Fixed Comments (Explanation of Table Headings)
Application Server Java HTTP None 50000 50000-59900 5<NN>00 Yes No None
Application Server Java HTTP over SSL None 50001 50001-59901 5<NN>01 Yes No None
Application Server Java IIOP initial context None 50002 50002-59902 5<NN>02 Yes No None
Application Server Java IIOP over SSL None 50003 50003-59903 5<NN>03 Yes No None
Application Server Java P4 None 50004 50004-59904 5<NN>04 Yes No None
Application Server Java P4 over HTTP tunneling None 50005 50005-59905 5<NN>05 Yes No

Relevant only for releases up to and including SAP NetWeaver 7.0x with Java Dispatcher

Application Server Java P4 over SSL None 50006 50006-59906 5<NN>06 Yes No None
Application Server Java IIOP None 50007 50007-59907 5<NN>07 Yes No None
Application Server Java Telnet None 50008 50008-59908 5<NN>08 Yes No None
Application Server Java JMS None 50010 50010-59910 5<NN>10 Yes No Relevant only for releases up to and including SAP NetWeaver 7.0x with Java Dispatcher
Application Server Java HTTP sapctrl<NN> 50013 50013-59913 5<NN>13 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50113.
Application Server Java HTTPS sapctrls<NN> 50014 50014-59914 5<NN>14 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50114.
Application Server Java Server join port None 50020 50020-59995 5<NN>20 + (<x> * 15) No Yes Server number <x> = 0..15
Application Server Java Server debug port None 50021 50021-59996 5<NN>21 + (<x> * 15) No Yes Server number <x> = 0..15
SAP Central Services (SCS) Enqueue server sapdp<NN> 3201 3200-3299 32<NN> No No

Provides locking services.

Profile parameter name enque/encni/port.

SAP Central Services (SCS) Enqueue server None 50116 50116-59916 5<NN>16 No No

Replication of enqueue data for high availability.

Profile parameter name enque/enci/repl_port

SAP Central Services (SCS) Message server port sapms<SID> 3601 3600-3699 36<NN> Yes No Configure the message server port with profile parameter rdisp/msserv.
SAP Central Services (SCS) Internal message server port None None 3600-3699 None No No

Configure the internal message server port with profile parameter rdisp/msserv_internal.

If this internal port is configured, all modifying clients like the application servers must connect to the internal port.

SAP Central Services (SCS) HTTP None 8100 8100-8199 81<NN> Yes No

Configure the message server HTTP port with profile parameter ms/http_port_<n>.

<n> stands for a number between 0 and 9. Always assign the parameters consecutive numbers ascending from 0 (withNogaps), so that they are correctly identified.

Not active by default.

SAP Central Services (SCS) HTTPS None 44400 44400-44499 444<NN> Yes No

Configure the message server HTTPS port with profile parameter ms/https_port_<n>.

<n> stands for a number between 0 and 9. Always assign the parameters consecutive numbers ascending from 0 (withNogaps), so that they are correctly identified.

Not active by default.

SAP Central Services (SCS) HTTP sapctrl<NN> 50013 50013-59913 5<NN>13 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50113.
SAP Central Services (SCS) HTTPS sapctrls<NN> 50014 50014-59914 5<NN>14 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50114.
SAP Central Services (SCS) Gateway sapgw<NN> 3301 3300-3399 33<NN> Yes No Ports used by gateway for CPIC and RFC communication.
SAP Central Services (SCS) Gateway secured sapgw<NN>s 4800 4800-4899 38<NN> Yes Yes

SNC secured for CPIC and RFC communication.

Fore more information, see SNC User's GuideInformation published on SAP site.

Note

There isNorelated sapdp<NN>s(47<NN>) port for the SAP Web Dispatcher.

Services SAP Host Agent None 1128 None None Yes No None
Services SAP Host Agent with SSL None 1128 None None Yes No None
Services SAP Start Service HTTP sapctrl<NN> 50013 50013-59913 5<NN>13 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50113.
Services SAP Start Service HTTPS sapctrls<NN> 50014 50014-59914 5<NN>14 Yes Yes On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50114.
Services SAP Web Dispatcher - HTTP port None None 0-65535 None Yes No Typical port for HTTP is 80. Has to be configured
Services SAP Web Dispatcher - HTTPS port None None 0-65535 None Yes No Typical port for HTTPS is 443. Has to be configured
Services Content Server None 1090 0-65535 None Yes No SAP Content Server
Services Cache Server None 1095 0-65535 None Yes No SAP Content Server
Services SAP Deployment Manager as part of AS instance None 50017 50017-59917 5<NN>17 No Yes None
Services SAP Deployment Manager as part of AS instance None 50018 50018-59918 5<NN>18 No Yes None
Services SAP Deployment Manager as part of AS instance None 50019 50019-59919 5<NN>19 No Yes None
Services SL Controller Administrative communnication None 50017 50017-59917 5<NN>17 No Yes None
Services SL Controller GUI port None 50018 50018-59918 5<NN>18 No Yes None
Services SL Controller HTTP port None 50019 50019-59919 5<NN>19 No Yes None
Services SAPinst None 21212 0-65535 Free No No One of two ports for SAP installer.
Services SAPinst None 21213 0-65535 Free No No One of two ports for SAP installer.
Services SAPinst on IDM AS400 iSeries None 59975 0-65535 Free No No SAPinst on IBM iSeries needs these additional ports. One of two ports for SAP installer.
Services SAPinst on IDM AS400 iSeries None 59976 0-65535 Free No No SAPinst on IBM iSeries needs these additional ports. One of two ports for SAP installer.
Services SDT HTTP server None 4239 0-65535 Free No No Used for communication between Software Delivery Tools (SDT) server and the browser on the remote host.
Services SAPup None 4240 0-65535 Free No No Used for communication between SDT server and SAPup.
Services SDT server None 4241 0-65535 Free No No Used for communication between SDT server and SUM GUI on the remote host.
Services Multiplexer None 40000 40000-49900 4<NN>00 None None Internet Graphics Server (IGS) as part of application server instance.
Services Portwatcher (Clients) None 40001-40079 40001-49979 4<NN>01-4<NN>79 None None Internet Graphics Server (IGS) as part of application server instance.
Services HTTP-ports None 40080-40099 40080-49999 4<NN>80-4<NN>99 None None Internet Graphics Server (IGS) as part of application server instance.
Services IPC dispatcher None 4363 0-65535 None Yes No Mobile client. Internet Pricing and Configurator (IPC) for SAP NetWeaver 7.0 and SAP CRM 5.0.
Services IPC dispatcher None 4444 0-65535 None Yes No Mobile client. Internet Pricing and Configurator (IPC) version 3.0 and 4.0.
Services IPC data loader None 4445 0-65535 None No No

Internet Pricing and Configurator (IPC) version 3.0 and 4.0.

Not active by default.

Services IPC server None 9999 0-9999 9999, 9998, … No No Counting down from 9999 for each server process. Internet Pricing and Configurator (IPC) version 3.0 and 4.0.
Services Design Time Repository None 50015 50015-59915 5<NN>15 No No NetWeaver Development Infrastructure (NWDI). Relevant for SAP NetWeaver 7.0 and higher.
Services PAW Communication Server None 1099 0-65535 None Yes No Java RMI Server
Services PAW Communication Servlet None 1089 0-65535 None Yes No None
Services Portal Runtime for Microsoft .NET None 8050 0-65535 None Yes No Default port can collide with Internet Communication Manager.
Services Portal server node for Portal Development Kit .NET None 8051 0-65535 None Yes No Default port can collide with Internet Communication Manager.
Services liveCache sql30 7200 0-65535 None Yes No If there are multiple SAP MaxDB instances on one host, all the instances share the services.
Services liveCache sql6 7210 0-65535 None Yes No If there are multiple SAP MaxDB instances on one host, all the instances share the services.
Services SAP MaxDB sapdni72 7269 0-65535 None Yes No If there are multiple SAP MaxDB instances on one host, all the instances share the services.
Services SAP MaxDB sdbnissl76 7270 0-65535 None No No If there are multiple SAP MaxDB instances on one host, all the instances share the services.
Services Webtools SDB 7575 0-65535 None No No If there are multiple SAP MaxDB instances on one host, all the instances share the services.
Services Master Data Server None 59950 50050-59950 5<NN>50 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Server HTTPS None 59951 50051-59951 5<NN>51 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Layout Server None 59650 50050-59950 5<NN>50 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Layout Server HTTPS None 59651 50051-59951 5<NN>51 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Import Server None 59750 50050-59950 5<NN>50 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Import Server HTTPS None 59751 50051-59951 5<NN>51 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Syndication Server None 59850 50050-59950 5<NN>50 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services Master Data Syndication Server HTTPS None 59851 50051-59951 5<NN>51 Yes No SAP NetWeaver Master Data Management (SAP MDM)
Services SAP NetWeaver Master Data Management Server None 2000 2000-9997 Port Yes No SAP MDM requires three consecutive ports for each repository.
Services SAP NetWeaver Master Data Management Server None 2001 2001-9998 Port+1 Yes No SAP MDM requires three consecutive ports for each repository.
Services SAP NetWeaver Master Data Management Server None 2002 2002-9999 Port+2 Yes No SAP MDM requires three consecutive ports for each repository.
Services JMS/JDBC/File Adapter Server None 8200 0-65535 None Yes No

Port used for interactive browser access to configuration interface.

Adapter does not belong to an SAP NetWeaver Application Server system. It can be installed on a host with SAP Process Integration (SAP PI) server, or standalone. Usually only one instance needed, because individual JMS/JDBC and File Adapter instances live inside one server process.

Default ports for multiple Adapter Installations on same host: 8201, …

Rules for this adapter not yet implemented.

Services JMS Adapter None 8210 0-65535 None No No Port for incoming data from SAP Process Integration (SAP PI) server.
Services JDBC Adapter None 8220 0-65535 None No No Port for incoming data from SAP Process Integration (SAP PI) server.
Services File Adapter None 8230 0-65535 None No No Port for incoming data from SAP Process Integration (SAP PI) server.
Services Name server None 30001 30001-39901 3<NN>01 No No Available for TREX 6.1, TREX 7.0, TREX 7.1.
Services Preprocessor None 30002 30002-39992 3<NN><x>2 No No

Multiple servers possible: <x>=server index (0..9).

Available for TREX 6.1, TREX 7.0, TREX 7.1.

Services Index server None 30003 30003-39993 3<NN>x3 No No

Multiple servers possible: x=server index (0..9).

Available for TREX 6.1, TREX 7.0, TREX 7.1

Services Queue server None 30004 30004-39994 3<NN>x4 No No

Multiple servers possible: x=server-index (0..9).

Available for TREX 6.1, TREX 7.0, TREX 7.1

Services HTTP server None 30005 30005-39905 3<NN>05 No No Available for TREX 6.1, TREX 7.0, TREX 7.1.
Services GRMG service (Heartbeat) None 30006 30006-39906 3<NN>06 No No Optional. Available as of TREX 7.0.
Services RFC server None 30007 30007-39907 3<NN>07 No No Multithreaded RFC server. Available as of TREX 7.0.
Services Cruiser None 30008 30008-39908 3<NN><x>8 No No Multiple servers possible: <x>=server index (0..9). Available as of TREX 7.1.
Services Alert server None 30011 30011-39911 3<NN>11 No No Available as of TREX 7.0.
Services Backup server None 30017 30011-39917 3<NN>17 No No Optional. Available as of TREX 7.1.
Services Index server None 8351 0-65535 None No No Text Retrieval and Information Extraction (TREX) 6.0
Services Queue server None 8352 0-65535 None No No Text Retrieval and Information Extraction (TREX) 6.0
Services HTTP server None 8353 0-65535 None No No Text Retrieval and Information Extraction (TREX) 6.0
Services Name server None 8355 0-65535 None No No Text Retrieval and Information Extraction (TREX) 6.0
Services Preprocessor None 8357 0-65535 None No No Text Retrieval and Information Extraction (TREX) 6.0
Services Monitoring (GRMG) None 8366 0-65535 None No No

Text Retrieval and Information Extraction (TREX) 6.0

Availability monitoring in CCMS.

Services SAProuter None 3299 0-65535 None Yes No None
Services niping None 3298 0-65535 None Yes No SAP network test program
Services SAPlpd printer 515 0-65535 None Yes No SAP printer spooler
SAP HANA Platform indexserver None 30015 30015 – 39915 3<NN>15 Yes SQL/MDX access port for standard database access. Access to these ports must be enabled for all database clients, for example, applications, application servers, end-user clients, and SAP HANA Studio.
SAP HANA Platform statisticsserver None 30017 30017-39917 3<NN>17 Yes SQL/MDX access port for standard database access. Access to these ports must be enabled for all database clients, for example, applications, application servers, end-user clients, and SAP HANA Studio.
SAP HANA Platform HTTP None 8000 8000 - 8099 80<NN> Yes No SAP Web Dispatcher as part of the SAP HANA installation
SAP HANA Platform HTTPS None 4300 4300 - 4399 43<NN> Yes No

SAP Web Dispatcher as part of the SAP HANA installation.

Not active by default.

SAP HANA Platform daemon None 30000 30000 – 39900 3<NN>00 Yes None
SAP HANA Platform nameserver None 30001 30001 - 39901 3<NN>01 Yes None
SAP HANA Platform preprocessor None 30002 30002 - 39902 3<NN>02 Yes None
SAP HANA Platform indexserver None 30003 30003 - 39903 3<NN>03 Yes None
SAP HANA Platform scriptserver None 30004 30004 - 39904 3<NN>04 Yes

Optional.

Not active by default.

SAP HANA Platform statisticsserver None 30005 30005 - 39905 3<NN>05 Yes None
SAP HANA Platform xsengine None 30007 30006 - 39906 3<NN>07 Yes None
SAP HANA Platform compileserver None 30010 30010 - 39910 3<NN>10 Yes None
SAP HANA Platform SOAP/HTTP None 50013 50013 – 59913 5<NN>13 Yes None
SAP HANA Platform SOAP/HTTPS None 50014 50014 – 59914 5<NN>14 Yes None
SAP HANA Platform SOAP/HTTP saphostctrl 1128 1128 1128 Yes Yes None
SAP HANA Platform SOAP/HTTPS saphostctrls 1129 1129 1129 Yes Yes None
SAP HANA Platform hdbrss None 30009 30009 – 39909 3<NN>09 Yes Yes Not active by default, SAP Note 1058533Information published on SAP site.
SAP Business Suite CSDM None 20201 0-65535 None Yes No Central Software deployment manager
SAP Business Suite DCOM DCE 135 135 None No Yes

Connection to license server.

DCOM uses port 135 for the Service Control Manager, which allocates a free port for the application.

SAP Business Suite Lotus Domino - Connector 1 None 62026 26-65526 <xxx>26 Yes No

Instance 1 of 4

SAP Business Suite Lotus Domino - Connector 2 None 62027 27-65527 <xxx>27 Yes No

Instance 2 of 4

SAP Business Suite Lotus Domino - Connector 3 None 62028 28-65528 <xxx>28 Yes No

Instance 3 of 4

SAP Business Suite Lotus Domino - Connector 4 None 62029 29-65529 <xxx>29 Yes No

Instance 4 of 4

SAP Business Suite Lotus Domino - Proxy 1 None

62126

26-65526 <xxx>26 Yes No

Instance 1 of 4

SAP Business Suite Lotus Domino - Proxy 2 None 62127 27-65527 <xxx>27 Yes No

Instance 2 of 4

SAP Business Suite Lotus Domino - Proxy 3 None 62128 28-65528 <xxx>28 Yes No

Instance 3 of 4

SAP Business Suite Lotus Domino - Proxy 4 None 62129 29-65529 <xxx>29 Yes No

Instance 4 of 4

SAP Enterprise Threat Detection

SAP ESP Web Service Provider

None

9786

9786

9786

Yes

Yes

Used to connect ABAP log providers.

  • REST

  • SOAP

SAP Enterprise Threat Detection

UDP

None

5514

0-65535

514

Yes

Yes

UDP connection for all other providers.

SAP Enterprise Threat Detection

TCP

None

10514

0-65535

10514

Yes

Yes

TCP connection for all other providers.

SAP Enterprise Threat Detection

TLS

None

10443

0-65535

10443

Yes

Yes

Encrypted connection for all other providers.

Disabled by default.

Application Server ABAP

SAP Dispatcher

sapdp<NN>

3200

3200-3299

32<NN>

Yes

Yes

Used by SAP GUI for Windows and Java.

Application Server ABAP

Gateway

sapgw<NN>

3300

3300-3399

33<NN>

Yes

Yes

Used for CPIC and RFC communication.

Application Server ABAP

Gateway secured

sapgw<NN>s

4800

4800-4899

48<NN>

Yes

Yes

SNC secured for CPIC and RFC communication.

Fore more information, see SNC User's GuideInformation published on SAP site.

Note

There is no related sapdp<NN>s(47<NN>) port for the SAP Web Dispatcher.

Application Server ABAP

ICM HTTP

None

8000

8000-8099

80<NN>

Yes

No

You can configure to port 80 after installation.

Not active by default.

Application Server ABAP

ICM HTTPS

None

44300

44300-44399

443<NN>

Yes

No

Must be configured after installation.

Not active by default.

Application Server ABAP

ICM SMTP

None

Not active

25

None

Yes

No

Must be configured after installation. Only one instance per host should offer SMTP services.

Application Server ABAP

HTTP

sapctrl<NN>

50013

50013-59913

5<NN>13

Yes

Yes

On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50113.

Application Server ABAP

HTTPS

sapctrls<NN>

50014

50014-59914

5<NN>14

Yes

Yes

On the SAP Central Services (SCS and ASCS) instance the default instance is 01 making the default port 50114.

Application Server ABAP

Message server

sapmsSID

3600

3600-3699

36<NN>

Yes

No

Relevant only for systems that have been installed prior to SAP NetWeaver 7.0 with a central instance (CI).

You can reassign service names to an arbitrary value after installation in /etc/services.

Application Server ABAP

Internal message server port

None

None

None

None

No

No

Relevant only for systems that have been installed prior to SAP NetWeaver 7.0 with a central instance (CI).

Configure the internal message server port with profile parameter rdisp/msserv_internal.

If this internal port is configured, all modifying clients like the application servers have to connect to the internal port.

For more information, see SAP Note 1421005Information published on SAP site.

Application Server ABAP

Message server HTTP

None

8100

8100-8199

81<NN>

Yes

No

Relevant only for systems that have been installed prior to SAP NetWeaver 7.0 with a central instance (CI).

Can be used to retrieve system information with HTTP.

Not active by default.

Application Server ABAP

Message server HTTPS

None

44400

44400-44499

444<NN>

Yes

No

Relevant only for systems that have been installed prior to SAP NetWeaver 7.0 with a central instance (CI).

Can be used to retrieve system information with HTTPS.

Not active by default.

Application Server ABAP

Dispatcher

UDP

3200

3200-3299

32<NN>

No

No

Only used on local host for signaling dispatcher. Never seen on the network.

Application Server ABAP

Gateway

UDP

3300

3300-3399

33<NN>

No

Yes

Only used on local host for signaling dispatcher. Never seen on the network. Disabled by default starting with release SAP NetWeaver 7.0 (gw/use_udp=1 enables UDP port).

Application Server ABAP

ICM Admin

None

65000

0-65000

Detected automatically

No

No

Internal communication. Automatically uses the first free port from 65000 downwards. Port accepts connections only from the local host.