Important: When specifying directories on a web server to be protected, exclude the /securant directory. Using a " /* " to protect your entire web server will block from the securant system from accessing the CGIs and forms needed to perform operations such as password changes. The best solution to protect all the directories on your web server is to move all the directories (except /securant ) into a sub-directory and then protect that sub-directory.