Well, there's numerous ways you can protect it. The most straightforward way to remove View access from guests and then create usernames/passwords for those who are allowed access.

You can also do it at the apache level using a .htaccess and .htpasswd file.

I have a similar situation and I have setup a way for Concrete5 to authenticate to an AD server in order for users to authenticate to view certain pages.

It all just depends on your needs and your situation...

concrete5 can do this quite handily, and as soon as we get our showcase back online i can show you some examples.

You should check out the permissions and advanced permissions model in the basics of our docs.

You should also check out the add-ons. Stuff like the document library, contact directory, and discussion forums can be put together to make an extranet for a few hundred bucks.

Thanks Franz, this helped me to get my little extranet up and running with the advanced permissions set in the site.php - great! All is there out of the box. Big smile.

For anyone interested:http://www.concrete5.org/index.php?cID=32373...