Restrict to direct access file and folder from url in web.config

<system.webServer>
 <security>
            <requestFiltering>
                <hiddenSegments>
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                    <add segment="Folder Name" />
                </hiddenSegments>
            </requestFiltering>
        </security>  

</system.webServer>