http protect proxied data

Apache, tomcat proxy htaccess

[jbalestrieri]

I have two servers, on running Tomcat and one running PHP / Apache.

When Apache sees a .jsp extention it proxies the pages over from the other server.

Currently I have a protected directory on the Apache server. When if fails, it still allows the proxies jsp pages from Tomcat to show.

What is the proper way to http protect the Apache sever so when it proxies information from tomcat, the pages do not show up?