On my website I've Wordpress in root and an MVC 5 application in sub directory. Unfortunately if I'll secure Wordpress, the app in the subdirectory doesn't work. Here is the scenario: / Wordpress install (working) /sub1 MVC5 Application, not working I've that rewrite <rule name="WordPress: http://www.agiletechideas.com" patternSyntax="Wildcard"> <match url="*" /> <conditions> <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" /> <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" /> </conditions> If I disable "matchType="IsDirectory" negate="true"" to "false" it work but I cannot access the admin page. I'm using "wp security", Brute Force , rename login page. I'm tried to use the redirect and the subdomain but is not working. May anyobdy help? Thanks.