Simple question

Hi all,

I've recently setup xymon on debian and it is all running fine. What I would now like to do is secure web access to it. Is it a simple case of .htaccess files and in which case which directory should I secure - is it the 'xymon' folder or somewhere else?

Thanks,

John