I have deployed a web application on IIS7 and the application has mail attachment files saved on webserver\'s Attachments folder and it\'s working fine when the
Attachments
Managed to block XML direct access in IIS and still allowing the app to query the file with the following rule: