<authentication mode="Forms">
<forms name="mycookie"
loginUrl="gestione/login.aspx"
protection="All" path="/"/>
</authentication>
 
<authorization>
<allow users="*"/> 
</authorization>
 
<location path="gestione">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>

<?xml version="1.0" encoding="UTF-8" ?>

<configuration>

  <system.web>
   
    <authentication mode="Forms"> 
     <forms name="mycookie" 
      loginUrl="gestione/login.aspx" 
       protection="All" path="/" /> 
    </authentication> 

    <authorization> 
      <allow users="*"/> 
    </authorization> 

  </system.web>

     <location path="gestione">
     <system.web>
      <authorization> 
       <deny users="?"/> 
      </authorization> 
     </system.web>

    </location>  

</configuration>