We deploy bowbridge as a protective layer for files and attachments in SAP environments. The solution scans files entering and leaving SAP, supports anti-malware protection, file type validation and DLP policies for sensitive data.
This matters particularly for regulated organisations, where SAP processes financial, logistics, HR, medical or audit-obligated documents.
Attachments submitted to SAP can become an attack vector against a critical system. bowbridge scans files before they are admitted into the SAP environment and helps block malicious content at the point of entry.
Banks, insurers, healthcare, the public sector and critical infrastructure operators must demonstrate control over content entering critical systems. bowbridge provides attachment protection mechanisms and an audit trail for blocked files.
DLP policies allow file types to be validated, specific formats to be blocked from leaving the organisation, and patterns of sensitive data to be detected, such as national ID numbers, IBAN, tax IDs, medical data or confidentiality clauses.
bowbridge operates on the SAP NetWeaver Virus Scan Interface. File type validation happens very quickly, and full AV scanning can be carried out asynchronously so as not to disrupt the daily work of SAP GUI, SAP Fiori and SAP Portal users.
We design the architecture, install the solution on the SAP NetWeaver Virus Scan Interface, and configure the scanning engines and blocking policies. Where needed, we integrate bowbridge with the client's existing antivirus infrastructure.
We configure rules for file type validation, blocking of specific formats and detection of sensitive data. Policies can cover national ID numbers, IBAN, tax IDs, medical data and documents marked confidential, among others.
We map and secure the entry points for attachments into SAP, including SAP GUI, SAP Fiori Launchpad, SAP Portal, Document Builder and SAP Output Management.
We map attachment and content protection mechanisms onto regulatory requirements. After deployment, we prepare a compliance report and an audit trail of blocked files that can support internal, external or regulatory audit.
We configure the update process for scanning engines, monitor emerging attack vectors, and prepare reports on detected and blocked events.
We begin a bowbridge deployment by mapping the entry points for attachments into the client's SAP environment. We identify which systems process files, which users rely on them, and which business scenarios involve document uploads.
On this basis we design the solution architecture, the scanning engine configuration, and a set of DLP policies tailored to the client's processes.
We then install bowbridge, configure integration with the SAP NetWeaver Virus Scan Interface, activate blocking rules, and test the solution against key business scenarios.
A full deployment typically takes 4-8 weeks, depending on the number of SAP systems, integration scope and number of DLP policies.
After go-live, we tune the policies over the first month so that file blocking does not disrupt normal business processes.
Technology stack
Partnerships backed by our team's certifications. Full authorisation for delivery and support.
International FMCG manufacturer
bowbridge deployment across three subsidiaries. The project covered protection of invoice and logistics document attachments processed in the SAP environment.
Critical infrastructure operator
bowbridge deployment and DLP policies for operational data. The project supported the organisation's preparation for NIS2 requirements around controlling content entering critical systems.
bowbridge integrates directly with SAP through the SAP NetWeaver Virus Scan Interface. As a result, it scans files processed within SAP data streams that a classic infrastructure-level antivirus may not see. It also supports DLP policies and file type validation tailored to the specifics of SAP.
Not necessarily. The solution can run on existing SAP servers or on a dedicated scanning machine. Integration through the SAP NetWeaver Virus Scan Interface does not require changes to SAP applications.
It should not noticeably affect users' daily work. File type validation happens very quickly, and full AV scanning can be carried out asynchronously.
NIS2 and DORA require control over the security of critical systems and appropriate ICT risk management. bowbridge can support meeting these requirements in the areas of attachment protection, content control and audit trail within the SAP environment.
Yes. bowbridge can support DLP policies such as blocking specific file types, detecting patterns of sensitive data, and controlling content leaving SAP.
