Simple question

Hi all,

 
I've recently setup xymon on debian and it is all running fine. What I
would now like to do is secure web access to it. Is it a simple case of
.htaccess files and in which case which directory should I secure - is
it the 'xymon' folder or somewhere else?

 
Thanks,

 
John