Can I use wildcards in the web.config location path attribute?

Question

In IIS 7 I try to deny access to all files with the extension .xml for all users.

I tried the following setting in my web.config file:

Answer 1

Another way is to use a request filter: