yes, if all pages in your site should be protected, then they will all need to be php pages with the Logged into users access url applied.
you can set the logged into users access rule to redirect to the login page.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.