VS 2010 Access Control Only Working For ASPX

I have created an access rule for my website, it looks like it works fine when trying to access .aspx files, but not for any other extensions. I was wondering if there is trick to apply the access rule for all files types.

Code:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>
<authorization>

[URL] ....

I tried to add the following code to my main config file but still will only work for .aspx only

Code:
<modules>
<add name="FormsAuthenticationModule" type="System.Web.Security.FormsAuthenticationModule" />
<remove name="UrlAuthorization" />
<add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" />
<remove name="DefaultAuthentication" />
<add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" />
</modules>