SAP Knowledge Base Article - Preview

3711801 - SAP Gateway Restarts Triggered by Vulnerability Scanning

Symptom

  • The SAP RFC Gateway service (sapgwXX) restarts automatically 
  • The restarts occur randomly and not on all application servers at the same time.
  • No manual restart is performed by administrators.
  • The issue is observed intermittently.

Upon reviewing the dev_rd the following errors are recorded:

  • NiIRead: recv (73: Connection reset by peer)
  • SI_ECONN_BROKEN
  • GwRead failed (NIECONN_BROKEN)
  • invalid ni hdl
  • Followed by:
  • GwStopGateway, gateway stopped.

The source IP address in the logs corresponds to a vulnerability scanning tool (for example, Nessus OS Vulnerability Scanner). 


Read more...

Environment

  • SAP NetWeaver
  • SAP NetWeaver Application Server for SAP S/4HANA
  • ABAP PLATFORM - Application Server ABAP

Product

SAP NetWeaver all versions

Keywords

KBA , BC-CST-GW , Gateway/CPIC , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.