Protected and unprotected pages

What is the high level overview of how to open up say, a login page, to everyone but have another directory with pages that are protected like members pages or something? I use SQL authentication in the login form. It's in its own app directory in IIS. The application that I want protected is in another and I want it to check if the user is logged in or not.

 

Thanks.
...