title: Deny access to specific folder on azure
body: <p>I recently migrated a rather large website to Azure.</p>
  
  <p>I know it is not the best practice, but the site is configured to store confidential files within the content folder, which was configured as deny all in IIS.</p>
  
  <p>However, when I try to add a web.config in said folder, Azure just ignores the deny entry when accessing files directly. I have tried different combinations of configs, nothing gives.</p>
  
  <pre><code> &lt;system.webServer&gt;
    &lt;security&gt;
        &lt;authorization&gt;
            &lt;remove users="*" roles="" verbs="" /&gt;
        &lt;/authorization&gt;
    &lt;/security&gt;
  &lt;/system.webServer&gt;
  </code></pre>
  
  <p>and</p>
  
  <pre><code>&lt;security&gt;
   &lt;ipSecurity allowUnlisted="false"&gt;            
   &lt;/ipSecurity&gt;
  &lt;/security&gt;
  </code></pre>
  
  <p>However, if I upload an invalid web.config to the folder, the site throws an error and nothing is served.</p>