<configuration>
...
<system.web>
...
<authentication mode="Forms">
<forms loginUrl="Login.aspx"
defaultUrl="Default.aspx" />
</authentication>
...
<authorization>
<deny users="?"/>
<allow users="*"/>
</authorization>
...
</system.web>
...
</configuration>