Restrict portions of an IIS 7.5 site to a list of IP addresses

Posted on 2012-09-11
Last Modified: 2014-01-20
We are using a purchased Java/Tomcat product on our Windows 2008 R2 (IIS 7.5) servers.   This product offers web services to which we'd like to filter access by IP address.    These services are contained within the same URL folder (example:   But we only wish to limit access to that folder.  The primary site should remain free to all.

I know that you can restrict acccess to the entire site by IP address.   But is there a way to control just isolated pieces that way?

Thank you.
Question by:RichardKline
    LVL 14

    Expert Comment

    Ive never run into a situation where this has been required but, my first guess would be try and restrict it by virutal directory and ip combination.  Not sure this will work but, hey its worth a shot.  When I get to where I have access to a web server again ill do some more digging for you.  Try doing the IP Address & Domain Restrictions piece when clicking on that directory you want to secure.
    LVL 8

    Expert Comment

    How to configure Web server permissions for Web content in IIS

    This should help you
    LVL 1

    Author Comment

    binaryevo:   I'l  take a look.  Thanks!

    vinsvin:  This method assumes that IIS can determine the user's account information.   This site is Java/Tomcat and uses non-AD authentication methods.   So the necessary information is hidden from IIS.     But Thanks!
    LVL 1

    Accepted Solution

    I found the answer:   Microsoft URL Rewrite Module 2.0 for IIS 7

    Microsoft's description: URL Rewrite Module 2.0 provides a rule-based rewriting mechanism for changing requested URL’s before they get processed by web server and for modifying response content before it gets served to HTTP clients.

    It probably does that :)   But I use it to create rules in a web.config file that are used to control per IP address access to specific site folders.
    LVL 1

    Author Closing Comment

    I found the solution myself but wanted to post this as information for others and not just delete the question.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    This subject  of securing wireless devices conjures up visions of your PC or mobile phone connecting to the Internet through some hotspot at Starbucks. But it is so much more than that. Let’s look at the facts: devices#sthash.eoFY7dic.
    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now