Can I use wildcards in the web.config location path attribute?

Question

In IIS 7 I try to deny access to all files with the extension .xml for all users.

I tried the following setting in my web.config file:

Answer 1

Try this:

By the way you could alternatively store all of your xml files within the App_Data directory. Storing files of any type in this directory will not be served to the web.