asp.net authorization
<location path="products">
  <system.web>
    <authorization>
      <deny users="?"/>
    </authorization>
  </system.web>
</location>