We are configuring an SM59 HTTP destination from an on-premise SAP S/4HANA system to an SAP Cloud Integration runtime endpoint in the Cloud Foundry environment. The destination is configured as follows: - Connection type: G – HTTP Connection to External Server - Target: <CI-runtime-host>.it-cpi023-rt.cfapps.eu20-001.hana.ondemand.com - Port: 443 - SSL: Active - SSL client: ANONYM - SAP kernel: 793, patch 331 - CommonCryptoLib: 8.5.61 - TLS version shown in the trace: TLS 1.2 The CI certificate chain has been imported into the relevant STRUST PSE. Other HTTPS destinations using the same ANONYM SSL configuration are working from this S/4 system. However, the connection test fails with the following error: SSL handshake with <CI-runtime-host>:443 failed: SSSLRC_CONN_CLOSED (-10) Remote Peer has closed the network connection SapSSLSessionStartNB()==SSSLRC_CONN_CLOSED SSL::SiRecv() failed rc==SSSLRC_CONN_CLOSED SSL_get_state()==0x2120 "TLS read server hello A" The ICM trace confirms that: - The hostname is resolved. - A TCP connection to the target IP on port 443 is established. - TLS 1.2 Client Hello is sent. - SNI contains the correct CI runtime hostname. - The connection closes while S/4 is waiting for the TLS Server Hello. Relevant trace: SSL_get_state()==0x2120 "TLS read server hello A" SecuSSL_SessionStartNB(): incomplete initial SSL/TLS handshake SSL handshake with <CI-runtime-host>:443 failed: SSSLRC_CONN_CLOSED (-10) Remote Peer has closed the network connection session-specific ciphersuites=566:PFS:HIGH::EC_P256:EC_HIGH AnonClient SSL TLSextSNI server_name="<CI-runtime-host>" We have also tested by setting the HTTP version to HTTP/1.1, but the same TLS handshake error continues. Since the connection is closed before the Server Hello and server certificate are received, we are unable to confirm whether the issue is related to the SAP ICM TLS configuration, cipher compatibility, the network path, or a specific requirement for the SAP Cloud Integration Cloud Foundry endpoint.