I want to turn off basic auth in Windows/IIS 7 that is enforced by the Helicon APE handler. It should be turned off for local IP#s e.g. 192.168.xxx.
Cross-referencing the Apache docs with the Helicon docs this seems viable however the environment variable in the Apache example 'MODSEC_ENABLE=Off' doesn't seem to be supported on Windows.
Is there a Helicon alternative that works?
# Apache htaccess sample:
SetEnvIfNoCase Remote_Addr ^192\.168\..+$ MODSEC_ENABLE=Off