Shows number of users that has initial password or they have old password. Old password is considered by default 180 days or more, but this parameter may be changed.

List of events related to user login and SAP* security risk. Double-click on the event to get more information.

True/false indicator to warn if there is a security related risk on system associated with the SAP* user backdoor logon. Two conditions must be met - parameter preventing SAP* from logging in must be turned off and SAP* user have to be deleted from table 't000'.

Shows number of users that have assigned role SAP_ALL, S_BCON (t-code DB02 access for executing SQL queries) and S_DEVELOP (developer accesses). Users with SAP_ALL are not counted towards S_DBCON and S_DEVELOP.

List of users with assigned potentially dangerous authorizations roles, double-click on the row to get more information.

Shows total number of anomalies, along with the counts of inbound and outbound failed RFC calls.

Total count of SSL certificates that expired or are in expiration period (expire in max. 30 days and have <10% of lifetime left).

Total count of RFC connections existing within the SAP system that are using dialog users for logon.

List of anomalies that have occurred in the system, double-click on the event to get more information. To fully utilize potential of this widget, we recommend enabling RFC security audit. More information here (DI-2308) Collector for RFC Security.

List of RFC connections on system that are using dialog users.

Shows total number of custom OS command defined on system, number of potentially dangerous command (that may have impact on system if misused) and number of overridden SAP security related parameters (RZ11).

List of custom SXPG command names defined on system together with OS command they execute. Double-click on the event to get more information.

List of altered security-related system parameters (they have different value than default value). Double-click on the event to get more information.

Displays the total count of imported transports along with the potentially problematic objects contained within them.

List of suspicious objects inside imported transports. These objects include authorization roles or objects, SXPG commands or enhancements.