Consider an IIS7 deployment with multiple Applications under a Web Site. Each is running under its own AppPool. We want to disallow all outside visitors access to one Application in particular. All internal users should be allowed access.
The current strategy is to check the requesting IP address. This likely could be done in IIS7 and a web.config. The screenshot is the first stab at allowing internal users. Those who present from:
192.168.0.Xshould be allowed.
an external IP, (i.e. a public address) should be denied.
Question: How would you configure your Application to suit this requirement, either by: