In the security constraint I put
Protects all resources
For All folder I put "*" in URL pattern but if I want put one folder outside from this constraint How can I?
exclusion of directories is unfortunately not possible.
The only thing you can do: move all protected content to subdirectories, and leave the root directory and the excluded subdirectory unsecured.
Hope this helps