How many types the Authentication IIS Provided?
Both IIS 6 and 7 natively support: • Anonymous Authentication • Basic Authentication • Digest Authentication (IIS 6 and 7 differ in their implementations) • Windows Authentication In IIS6 Forms Authentication is provided separately by ASP.NET because ASP.NET is not an integral part of IIS6. This is why, out of the box, it is not possible to secure non-ASP.NET assets such as ASP pages, images or plain HTML pages using Forms Authentication. Requests for these types of files never hit the ASP.NET pipeline because they are handled directly by http.sys or the classic ASP ISAPI filter. In a default install of ASP.NET on IIS6 only the .NET page types can be secured by ASP.NET Forms Authentication: .aspx, .asmx, .ashx etc. This is because these page types are mapped to the ASP.NET ISAPI filter: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll If you wanted to secure static content such as .html, .jpg etc using ASP.NET Forms Authentication then you’d need to map these extensions t
